Let's Encrypt Overview

Re:Let's Encrypt Overview by icebraining on Friday June 12, 2015 @03:10PM (#9707938)

I believe that's the point of the Name Constraints property, but from what I can tell it's generally ignored.

[ Parent | on HN ]

Re:Let's Encrypt Overview by JoshTriplett on Friday June 12, 2015 @04:12PM (#9708240)

In particular, there are enough stacks that ignore it that it would be unsafe to issue a CA certificate even with nameConstraints.

[ Parent | on HN ]

Re:Let's Encrypt Overview by grahamedgecombe on Friday June 12, 2015 @05:31PM (#9708686)

X509 extensions can be marked as critical. Certificates must be rejected if the stack encounters a critical extension it doesn't understand. (In theory at least, I haven't looked at real implementation behaviour.)

[ Parent | on HN ]

Re:Let's Encrypt Overview by dtech on Saturday June 13, 2015 @06:01AM (#9710503)

So then you've jumped from the frying pan into the fire, since your cert now will not work in those implementations.

[ Parent | on HN ]