Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The only "safe" way to introduce these would be to make a certificate format that's intentionally incompatible with existing implementations; that way only new implementations (which are aware of the domain constraint) will accept it where as old implementations would just reject the certificate as invalid/corrupt.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: