IDNA200x and PKIX chain validation

Paul Hoffman phoffman at imc.org
Thu Mar 27 17:40:20 CET 2008


At 4:26 PM +0100 3/27/08, Simon Josefsson wrote:
>Doesn't this approach lead to, for example, that the outcome of X.509
>certificate chain validation will depend on the locale in which the
>application is running in?

Not at all. The domain names used in chain validation are expressed 
as punycode/A-labels.


More information about the Idna-update mailing list