[cabfpub] Proposed new ballot on IP Addresses in SANs

Geoff Keating geoffk at apple.com
Sat Apr 16 00:29:55 UTC 2016

> On 15 Apr 2016, at 4:46 PM, Rick Andrews <Rick_Andrews at symantec.com> wrote:
> Richard, some of us CAs have “gotten along” by issuing certs that violate this part of the BRs. Given that customers can only get certs that work in Windows if we violate this part of the BRs, and given that Microsoft isn’t able or willing to patch all old versions of Windows to address this, I’d like to legalize what we’ve been forced to do.

If Microsoft doesn’t think this is an important enough problem to fix with a patch, and it’s their customers that are currently affected, why should any other browser support this BR change?  We would all have to patch our software to at least ignore these values, if not to recognize and match them.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3321 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160415/1bdfbe7c/attachment-0001.p7s>

More information about the Public mailing list