[cabfpub] Proposed new ballot on IP Addresses in SANs

Rick Andrews Rick_Andrews at symantec.com
Fri Apr 15 15:09:25 MST 2016


It’s come to our attention that all versions of Windows prior to Windows 10
cannot handle SANs of type IPAddress. Those older versions correctly handle
IP addresses in SANs if they are of type dNSName. Jody from Microsoft has
confirmed this.

I’d like to propose a ballot to allow IP addresses in SANs of type dNSName
to allow for this. Jody has said he would endorse. I need another endorser.
The proposed change is this (added text between + signs):

7.1.4.2.1 Subject Alternative Name Extension
Each entry MUST be either a dNSName containing the Fully‐Qualified Domain
Name +or the IP address of a server,+ or an iPAddress containing the IP
address of a server

-Rick
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5749 bytes
Desc: not available
Url : https://cabforum.org/pipermail/public/attachments/20160415/e03d3363/attachment.bin 


More information about the Public mailing list