Re: [httpslocal/usecases] [Requirements] a device CA that could issue specific domain only (#22) from Tomoyuki Shimizu on 2018-02-14 (public-httpslocal@w3.org from February 2018)

From: Tomoyuki Shimizu <notifications@github.com>
Date: Wed, 14 Feb 2018 08:33:07 +0000 (UTC)
To: httpslocal/usecases <usecases@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Message-ID: <httpslocal/usecases/issues/22/365531632@github.com>

A couple of additional topics:

- X.509 has [name constraints extension](https://tools.ietf.org/html/rfc5280#section-4.2.1.10).
- CA/Browser Forum defines Technically Constrained Subordinate CA in [Baseline Requirements for theIssuance and Management of Publicly-Trusted Certificates](https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.5.1.pdf). Technically Constrained Subordinate CA has a limited domain scope defined by name constraints.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/httpslocal/usecases/issues/22#issuecomment-365531632

Received on Wednesday, 14 February 2018 08:33:38 UTC