[cabf_validation] [EXT] Re: 5280 limitations

[Rick Andrews]

Jeremy,

 

We have a number of customers (some are large enterprises) who have obtained
certs from us with underscores. We've gotten some input from them, and the
general feeling is that they could rename their systems to eliminate the
underscores, but it's non-trivial and might take a year or more. My personal
opinion is that it's not worth fighting for. We think we might just alert
our customers that say, within 18 months, we're going to block any
enrollments with underscores and they will need to work around it.

 

Regarding CN limits: aside from the recent posting to the questions list,
I'm not aware of any customers that have had a problem with the current
limit, so again, I don't think it's something I would fight for.

 

-Rick

 

From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of Peter
Bowen via Validation
Sent: Tuesday, March 21, 2017 7:28 AM
To: CA/Browser Forum Validation WG List <validation at cabforum.org>
Cc: Peter Bowen <pzb at amzn.com>
Subject: [EXT] Re: [cabf_validation] 5280 limitations

 

No issues with browsers.  

 

I would be happy to bring this up today.

 

On Mar 21, 2017, at 7:25 AM, Bruce Morton via Validation
<validation at cabforum.org <mailto:validation at cabforum.org> > wrote:

 

I would be concerned with failures with the browsers. Are there any current
issues?

 

Thanks, Bruce.

 

From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of
Jeremy Rowley via Validation
Sent: Tuesday, March 21, 2017 10:18 AM
To: CA/Browser Forum Validation WG List <validation at cabforum.org
<mailto:validation at cabforum.org> >
Cc: Jeremy Rowley <jeremy.rowley at digicert.com
<mailto:jeremy.rowley at digicert.com> >
Subject: [cabf_validation] 5280 limitations

 

Is there interest in creating an exception to 5280 for the following?

 

1)      Use of underscore characters in host names

2)      Limitation on subject fields to 64 characters

 

Jeremy

 

_______________________________________________
Validation mailing list
Validation at cabforum.org <mailto:Validation at cabforum.org> 
https://clicktime.symantec.com/a/1/Mdie5gfbdjlSOqvZYHF88zGWishqapELNnq4o159G
mk=?d=wlI4E2AYGPSwYqebhQ1oAgsPjt35MnuufpCipAtpMU2SNy51otURlNndvaA4C6imOEKen6
EP4yN6w2Vn5SiKyDhX1_919dUydOzdX8e-wYhCs8GXafjbZL3wK8RDQVly3dXCwfb8bfXdQEdB2f
CztiMOpQzFPLOVbzorTczhH21oDAZO8DEMQHDHiAVlNjPZHQ3KumovqJdZESZCt76j9od2nXOocx
SBLo1HXdZl2no24IsDgui0qCjdmyyTM65T6vyzV3jLJmtRiyiAPPvDPiTJQos2y_PfYHmOT_Xzs7
QpOIHoYyFZAjaaEkzhVQ9SczWOXREtbFYqf8INIyJ_q2JJbyTH5yytEfB43A-JtBv4v1SsMaNxRY
sRa_N2l-odlkbfYXd5KA%3D%3D&u=https%3A%2F%2Fcabforum.org%2Fmailman%2Flistinfo
%2Fvalidation

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20170321/ca83eb06/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5725 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/validation/attachments/20170321/ca83eb06/attachment-0001.bin>