Re: [Spasm] IDNA2008 and PKIX certificates
Nikos Mavrogiannopoulos <[email protected]>
| Newsgroups | gmane.ietf.x509 |
|---|---|
| Message-ID | <[email protected]> |
On Mon, 2016-12-19 at 12:17 -0500, Russ Housley wrote: > Nikos: > > RFC 5280 only needs to convert to punycode. The punycode form is > carried in certificate, and the punycode form is used to compare two > domain names. > RFC 5280 refers to Section 4 of RFC 3490 for the conversion. In > addition, Section 7.2 of RFC 5280 provides some guidance about the > flags > used in that process. You may be right. The "obsoleted by" header in the referenced rfc3490, is probably sufficient. regards, Nikos _______________________________________________ pkix mailing list [email protected] https://www.ietf.org/mailman/listinfo/pkix