[cabfpub] Proposed new ballot on IP Addresses in SANs

Richard Barnes rbarnes at mozilla.com
Fri Apr 15 22:43:04 UTC 2016

Rick: This seems pretty abusive.  Given that apparently you've gotten along
without this so far, what's the compelling use case?

On Fri, Apr 15, 2016 at 6:09 PM, Rick Andrews <Rick_Andrews at symantec.com>

> It’s come to our attention that all versions of Windows prior to Windows 10
> cannot handle SANs of type IPAddress. Those older versions correctly handle
> IP addresses in SANs if they are of type dNSName. Jody from Microsoft has
> confirmed this.
> I’d like to propose a ballot to allow IP addresses in SANs of type dNSName
> to allow for this. Jody has said he would endorse. I need another endorser.
> The proposed change is this (added text between + signs):
> Subject Alternative Name Extension
> Each entry MUST be either a dNSName containing the Fully‐Qualified Domain
> Name +or the IP address of a server,+ or an iPAddress containing the IP
> address of a server
> -Rick
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160415/2f3acdf9/attachment-0003.html>

More information about the Public mailing list