A discussion started on the GitHub repo 
https://github.com/richsalz/draft-ietf-uta-rfc6125bis about what is allowed for 
the wildcard character, such as in DNS entries in subjectAltName.  I am about 
to publish a new draft which takes the old adopted “diff” version and does a 
full version of 6125. The current draft says that a wildcard may be the first, 
or only, character in the left-most DNS name.

Brian Smith and Ryan Sleevi started a discussion on the PR 
https://github.com/richsalz/draft-ietf-uta-rfc6125bis/pull/1#discussion_r663206174
 recommending that the doc should be the *only* character.  For example, 
*.apps.example.com is okay, but *apps.example.com is not.

I’d like to know what the WG thinks.  As we’re not really using GitHub for 
discussion, please comment on this list.


_______________________________________________
Uta mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/uta

Reply via email to