amazon-archives / certlint

X.509 certificate linter
Apache License 2.0
157 stars 42 forks source link

Underscores in DNS names #22

Closed robstradling closed 8 years ago

robstradling commented 8 years ago

https://crt.sh/?id=12815060&opt=cablint "WARNING: Underscore should not appear in DNS names"

Would you consider removing that warning? Or do we first need to get CABForum to vote on whether underscores should be permitted?

rsleevi finds it " 'not clear cut' as to what's expected". https://www.mail-archive.com/dev-security-policy@lists.mozilla.org/msg02548.html

pzb commented 8 years ago

I'm not going to remove the warning. It really should be an error but I'm going to leave it at a warning due to the ongoing discussion