On May 21, 2015, at 12:10 PM, Alec Muffett <al...@fb.com> wrote:
> Not to complicate matters, but CA/B-Forum are saying the following:
> 
> https://cabforum.org/2015/02/18/ballot-144-validation-rules-dot-onion-names/
> 
>> 5. CAs MUST NOT issue a Certificate that includes a Domain Name where .onion 
>> is in the right-most label of the Domain Name with a validity period longer 
>> than 15 months. Despite Section 9.2.1 of the Baseline Requirements 
>> deprecating the use of Internal Names, a CA MAY issue a Certificate 
>> containing an .onion name with an expiration date later than 1 November 2015 
>> after (and only if) .onion is officially recognized by the IESG as a 
>> reserved TLD.
> 
> - my emphasis.
> 
> It would be a shame for them to nitpick the rules because "special purpose 
> namespace" != "TLD"?

They can say whatever they want, and they can change their mind whenever they 
want. They can also ask us (for many different values of "us") before they make 
rules that require us to do something that affects their members.

--Paul Hoffman

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to