Re: [certid] open issue: wildcards in component fragments

["Jeffrey A. Williams" <[e-mail]>]

Joe and all,

  I concur.  


-----Original Message-----
>From: Joe Orton <[e-mail]>
>Sent: Oct 12, 2010 5:00 AM
>To: [e-mail]
>Subject: Re: [certid] open issue: wildcards in component fragments
>
>On Mon, Oct 11, 2010 at 12:43:29PM -0600, Peter Saint-Andre wrote:
>> Speaking of which, someone contacted Jeff and me off-list about some
>> research results showing that of a very large number of certificates
>> presented by TLS-protected websites, less than 0.01% contain wildcards
>> in component fragments. Given that minuscule level of deployment, I
>> don't see good reasons to spend more cycles on the topic.
>
>The relative number of certs is less relevant than how widely those 
>certs are used, surely.  I checked the "top 1m sites" database from:
>
>http://blog.johnath.com/2009/01/21/ssl-information-wants-to-be-free/
>
>- 382860 total sites (hostnames) returned a cert
>- 94438 of total sites used a wildcard cert (24%)
>- 5% of total sites use the wildcard cert with CN=*.blogger.com
>   ... other blogging/mass-hosting sites similarly high usage
>
>Only a handful (5) use the "f*.example.com" form; all those were certs 
>issued by the GoDaddy and starfieldtech.com CAs.
>
>I support Martin's arguments that the "f*.example.com" form specified in 
>RFC 2818 should be supported.
>
>Regards, Joe
>_______________________________________________
>certid mailing list
>[e-mail]
>https://www.ietf.org/mailman/listinfo/certid

Regards,
Jeffrey A. Williams
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is very
often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B; liability
depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of
Information Network Eng.  INEG. INC.
ABA member in good standing member ID 01257402 E-Mail [e-mail]
Phone: [phone]