Bush-league PKI: both OSX & #golang X509 engines only grok DNS name constraints, fail on email constraint
#Macintrash #doyouevenRFC
@randomoracle Even when there are no rfc822names to check against the constraint?
-
-
@BRIAN_____ Yes. Leaf subject only uses DNS names, but issuing CA has critical constraint on RFC822 names Go-based utilities failThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.