Simon Josefsson wrote:
RFC 2818 specify how it should be handled for TLS, but you are most
likely correct that multiple browsers doesn't implement it properly.
It only specifies that wildcard(s) are valid for 1 level of hostname(s),
it doesn't clarify the issue of multiple wildcards per hostname(s) being
valid or not and this is where the browsers start doing their own thing.
Is there a use case in OpenPGP for any other alt name than dnsName?
That's the whole point of this draft, people (including myself) want
more than just a hostname(s), otherwise we could have just re-used the
user-id field for the dns name(s).
--
Best regards,
Duane