[cabf_validation] 190 definitions

[Doug Beattie]

How about something like this:

If the Domain Name is a Fully-Qualified Domain Name, the Authorization Domain Names include each Domain Name created by pruning 0 or more Domain Labels from the Domain Name from left to right up to and including the Base Domain Name.


From: Validation [mailto:validation-bounces at cabforum.org] On Behalf Of Peter Bowen via Validation
Sent: Thursday, July 13, 2017 11:27 AM
To: CA/Browser Forum Validation WG List <validation at cabforum.org>
Subject: [cabf_validation] 190 definitions

Authorization Domain Name: Any name from the set of Fully-Qualified Domain Names derived from a Requested Domain Name using the rules described in section 3.2.2.4.
In 3.2.2.4:
Authorization Domain Names are the set of names created from a Domain Name using the following rules:

     *   If the Domain Name is a Wildcard Domain Name, Authorization Domain Names include the Authorizations Domain Names for the FQDN portion of the Wildcard Domain Name.
     *   If the Domain Name is a Fully-Qualified Domain Name, Authorization Domain Names include each Domain Name created by pruning Domain Labels from the Domain Name from left to right until encountering a Base Domain Name.
     *   If a DNS lookup for CNAME records for the Domain Name returns a FQDN, Authorization Domain Names include the Authorizations Domain Names for the returned FQDN.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20170713/4e9a9a1b/attachment.html>