Re: Discussion of 6.1 for LC June

On 26-Mar-08, at 7:52 AM, Thomas Roessler wrote:
> Yngve, Johnath, would you have any input what your current
> implementations do with (a) wildcards in CNs in terms of matching,
> and (b) how they are distinguished from human-readable CNs for the
> purpose of deriving whatever string can be shown to people.

The current AA certs out there (EV certs) don't allow wildcard  
matching, but in any case, EV certs also require, full stop, a valid O  
field, so we don't walk the rest of the cert for that value.  If a CA  
is issuing EV certs without valid (and validated!) O fields, they  
should fail their audits.  :)

Cheers,

J

---
Johnathan Nightingale
Human Shield
johnath@mozilla.com