3 ms·
The only "safe" way to introduce these would be to make a certificate format that's intentionally incompatible with existing implementations; that way only new
by Nextgrid 3y ago
The only "safe" way to introduce these would be to make a certificate format that's intentionally incompatible with existing implementations; that way only new implementations (which are aware of the domain constraint) will accept it where as old implementations would just reject the certificate as invalid/corrupt.