Wildcards on cert host checking

Gary E. Miller gem at rellim.com
Wed Feb 13 23:23:28 UTC 2019


Yo James!

On Wed, 13 Feb 2019 15:12:24 -0800
James Browning via devel <devel at ntpsec.org> wrote:
> 
> I wrote a proposal for how to handle an NTS enabled pool (including
> something on how not to share K), back in "The key-manahement
> argument"
> https://lists.ntpsec.org/pipermail/devel/2019-January/007105.html

Domain names can not start with digits.  Which is part of your proposal.

See RFC 1035: https://tools.ietf.org/html/rfc1035

You correctly saw that as an unused case, but unused and not useable.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
	gem at rellim.com  Tel:+1 541 382 8588

	    Veritas liberabit vos. -- Quid est veritas?
    "If you can’t measure it, you can’t improve it." - Lord Kelvin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 851 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20190213/05cb36e5/attachment.bin>


More information about the devel mailing list