On Mon, Jan 26, 2015 at 8:46 PM, Brian Smith <brian@briansmith.org> wrote: > Brad Hill <hillbrad@gmail.com> wrote: > > Public CAs are only to stop issuing for IP addresses in reserved ranges, > I > > believe. (10.0.0.0, 171.16.0.0, 192.168.0.0, 127.0.0.1) > > Yes, unfortunately, that does seem to be the case. > > I still think it is fine for CSP to restrict itself to 127.0.0.1 and ::1. > I think that's theoretically sound. It's not clear to me that we can actually do it, since we've been accepting ip addresses for the last ~2 years. I'll add some metrics to Chrome to see if usage is widespread enough to worry about, or whether we can tighten things up without too many worries. -mike -- Mike West <mkwst@google.com>, @mikewest Google Germany GmbH, Dienerstrasse 12, 80331 München, Germany, Registergericht und -nummer: Hamburg, HRB 86891, Sitz der Gesellschaft: Hamburg, Geschäftsführer: Graham Law, Christine Elizabeth Flores (Sorry; I'm legally required to add this exciting detail to emails. Bleh.)
Received on Wednesday, 28 January 2015 09:38:33 UTC