At 4:26 PM +0100 3/27/08, Simon Josefsson wrote: >Doesn't this approach lead to, for example, that the outcome of X.509 >certificate chain validation will depend on the locale in which the >application is running in? Not at all. The domain names used in chain validation are expressed as punycode/A-labels.