Re: A primer on cross-origin information leaks

On 5/21/18 2:27 PM, John Wilander wrote:

<snip/>

> The wildcard notation differs in meaning across specs. In the case of
> wildcard certs I believe an asterisk only matches one segment, i.e.
> *.example.com <http://example.com> only matches a single subdomain, not
> subdomains of subdomains.

That's what Jeff Hodges and I specified in RFC 6125, anyway...

https://tools.ietf.org/html/rfc6125#section-6.4.3

Peter