Re: [webauthn] Operating System Vendor Public Key Infrastructure and Web Authentication

X509 certificates commonly utilize _issued by_ and _issued to_ information.  Regarding question 2 (see also: #458), which broaches cross-domain keys, options include extending X509 certificates to include _issued for_ information, a sequence of domains with wildcards, to specify the domains which a certificate is intended for.

Operating system vendor-provided certificates could utilize the wildcard value "*" for _issued for_ and thus would be available for users to select for every domain.

https://www.ietf.org/rfc/rfc5280.txt
https://en.wikipedia.org/wiki/Wildcard_certificate

-- 
GitHub Notification of comment by AdamSobieski
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/521#issuecomment-320531203 using your GitHub account

Received on Sunday, 6 August 2017 20:39:36 UTC