> If name constraints were implemented more widely, that'd be great. But someone has to write the code, debug it, ship it Without name constraints I assert the

> If name constraints were implemented more widely, that'd be great. But someone has to write the code, debug it, ship it Without name constraints I assert the system is inherently broken. You cannot limit trust other than yes/no. > ultimately wildcard certs work well enough. Well enough is arguable. The problem is that your attack surface grows with each machine rather than having a private key per machine.