On 01/04/14 21:26, Rob Stradling wrote:
> Hi Gerv.  I don't think this is desirable.
> 
> Only the domain owner needs to know what the unmasked subdomains are,
> and they can do this by simply looking at the corresponding Certificate.

Does it not help with your combinatorial explosion, because it's then
much easier to match up a potential cert with its logged precert?

Or am I mistaken?

Gerv

_______________________________________________
Trans mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/trans

Reply via email to