[cabfpub] More changes to proposed policy update

Wan-Teh Chang wtc at google.com
Wed May 23 14:35:32 MST 2012


On Wed, May 23, 2012 at 2:19 AM, Rob Stradling <rob.stradling at comodo.com> wrote:
>
> The consensus on the PKIX list seemed to be against updating RFC5280 to
> allow non-critical Name Constraints, but several folks suggested that it
> would be reasonable for the Baseline Requirements to be modified to
> allow non-critical Name Constraints.
>
> Therefore, I think that Mozilla should propose a change to the Baseline
> Requirements to allow non-critical Name Constraints.  I'd be happy to
> endorse it.  I'd be surprised if anybody voted against it!

Ideally this change should be made to RFC 5280.  Perhaps it's easier
to change the Baseline Requirements than changing an RFC of the PKIX
working group?

I support allowing non-critical Name Constraints.

Wan-Teh


More information about the Public mailing list