On Fri, Jul 04, 2014 at 10:50:47PM +0200, noloa...@gmail.com via RT wrote: > Updated text for the patch based on Viktor's reply to JW and JB on the list. > > The updted text includes the a statement that its not possible to > determine which named matched (this may be added in the future); and > the two-label rule could make an application vulnerable to attacks on > ccTLDs like "*.co.uk" (the two-label rule stops attacks on gTLDs like > "*.com").
Should it mention publicsuffix.org? Or should we use that list? Kurt ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
