At 01:34 AM 11/14/2011, Dave CROCKER wrote:
what's the purpose? what problem is this intended to solve? how
prevalent is that problem now?
There was a discussion about this subject a year ago ( it may be
related to
http://www.ietf.org/mail-archive/web/yam/current/msg00420.html ). I
vaguely recall some discussion about SSL certificate
verification. See RFC 6125 as well.
Regards,
-sm