3 ms·
Or maybe limit them to certain .cn domains? (Excluding well known targets?)
by MichaelGG 10y ago
Or maybe limit them to certain .cn domains? (Excluding well known targets?)
- noinsight 10y agoSupposedly name constraints are not universally supported though. See: http://security.stackexchange.com/questions/31376/certification-authority-limited-only-to-certain-domains http://security.stackexchange.com/questions/31376/certificat... http://blog.codekills.net/2012/04/08/adventures-in-x509-the-utterly-ignored-nameconstraints/ http://blog.codekills.net/2012/04/08/adventures-in-x509-the-...