Victor Duchovni wrote:
is rather muddy... Used by whom? For what? In addition? Instead? So perhaps the HTTPS RFC elaborates the intent of a rather poorly worded base RFC.
Agreed. Yes, rfc2818 elaborates the intent in rfc2459 (which got obsoleted by rfc3280). However, in the IETF SIP WG, we are currently trying to tease out the meaning of identities in SAN and how they should be used in the context of TLS. Thanks, - vijay -- Vijay K. Gurbani [EMAIL PROTECTED],research.bell-labs.com,acm.org} Bell Laboratories, Lucent Technologies, Inc. 2701 Lucent Lane, Rm. 9F-546, Lisle, Illinois 60532 (USA) ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]