[cabf_validation] IP Address Validation Ballot

[Jeremy Rowley]

Right - but isn't that already covered under the reverse lookup section?

 

From: Tim Hollebeek [mailto:THollebeek at trustwave.com] 
Sent: Thursday, February 9, 2017 9:18 AM
To: CA/Browser Forum Validation WG List <validation at cabforum.org>
Cc: Jeremy Rowley <jeremy.rowley at digicert.com>
Subject: RE: IP Address Validation Ballot

 

Since we've already moved on on the call, I'll mention this by email.

 

Contrary to the suggestion that there is no DNS record for an IP, you
*could* actually do DNS-based validation for IP addresses, by
adding/modifying a TXT record on the reverse lookup DNS entry for the IP.
If you can do that, you obviously can also validate via 3.2.2.5.2, so we
might as well allow it.

 

-Tim

 

From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of
Jeremy Rowley via Validation
Sent: Thursday, February 09, 2017 10:52 AM
To: CA/Browser Forum Validation WG List
Cc: Jeremy Rowley
Subject: [cabf_validation] IP Address Validation Ballot

 

 

 

  _____  


This transmission may contain information that is privileged, confidential,
and/or exempt from disclosure under applicable law. If you are not the
intended recipient, you are hereby notified that any disclosure, copying,
distribution, or use of the information contained herein (including any
reliance thereon) is strictly prohibited. If you received this transmission
in error, please immediately contact the sender and destroy the material in
its entirety, whether in electronic or hard copy format.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20170209/19200f73/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4964 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/validation/attachments/20170209/19200f73/attachment.bin>