[cabfpub] Updated Ballot 190 v4 dated June 30, 2017

Gervase Markham gerv at mozilla.org
Sat Jul 1 00:53:46 UTC 2017


On 30/06/17 17:19, Kirk Hall via Public wrote:
> “_Note_: Once the FQDN has been validated using this method, the CA MAY
> also issue Certificates for other FQDNs that have more labels than the
> validated FQDN and end in the validated FQDN.”

If we are going to be pedantic, foo.wibble-fish.com has more labels than
fish.com and still "ends in" the validated FQDN in the same sense the
was objected to.

It would be much better to phrase this entirely in terms of labels.
Here's my first stab:

_Note_: Once the FQDN has been validated using this method, the CA MAY
also issue Certificates for other FQDNs that end with all the labels of
the validated FQDN and have more labels than it.

Gerv


More information about the Public mailing list