[Servercert-wg] Removing the exception to allow non-critical name constraints

Paul Hoffman paul.hoffman at icann.org
Thu Oct 17 07:58:48 MST 2019

De-cloaking for just a moment...

It feels like some folks here feel that maybe we are moving too fast because name constraints being marked critical happened "recently", in RFC 5280 from just 11 years ago. Old-timers will remember that it was also marked that way in RFC 3280 from 2002.

--Paul Hoffman

More information about the Servercert-wg mailing list