[cabfpub] Proposed new ballot on IP Addresses in SANs

Jeremy Rowley jeremy.rowley at digicert.com
Thu Apr 21 13:14:46 MST 2016


We’re still testing, but I think we would support this ballot. Looks like IP address in the SANS:DNS plus SANS:IPaddress works.

 

Jeremy

 

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Ryan Sleevi
Sent: Thursday, April 21, 2016 2:10 PM
To: Doug Beattie
Cc: Rick Andrews; public at cabforum.org
Subject: Re: [cabfpub] Proposed new ballot on IP Addresses in SANs

 

 

 

On Thu, Apr 21, 2016 at 1:06 PM, Doug Beattie <doug.beattie at globalsign.com <mailto:doug.beattie at globalsign.com> > wrote:

 

Ryan – This sounds like a possible solution.  Would you support a ballot that allows the issuance of BR compliant certificates containing IP addresses in the dNSName if and only if the same value is also in an iPAddress SAN field?  This comment was within the contest of Name Constraints, so I could be misinterpreting your suggestion. 

 

 

No, we will not support any such ballot without Forum members who feel there is a need for it, and who can provide demonstration, evidence, and discussion as to why the conforming solution proposed 8 months ago is not viable.

 

Without that, it seems purely an attempt to circumvent standards, whether for financial benefit, competitive advantage, or intellectual laziness. These are all strong words, I'm fully aware, but the situation surrounding this - the intentional and ongoing violations, the lack of compliance monitoring, and the lack of response over many months to a proposal that would have avoided this mess, is deeply disturbing, and thus my ability to ascribe good faith to the proponents is, unfortunately, severely exhausted.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20160421/49eb51a6/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4964 bytes
Desc: not available
Url : https://cabforum.org/pipermail/public/attachments/20160421/49eb51a6/attachment.bin 


More information about the Public mailing list