Bonjour, Le 25 juil. 2017 à 21:25, Geoff Keating <[email protected]<mailto:[email protected]>> a écrit :
On 25 Jul 2017, at 12:01 pm, Peter Bowen via Public <[email protected]<mailto:[email protected]>> wrote: […] F. In Section 1.6.1 of the Baseline Requirements, REPLACE the definition for "Reserved IP Address" with the following: An IPv4 or IPv6 address that the IANA has "False" for Globally Reachable in either of the IANA Special-Purpose IP Address Registries: https://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml or https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml and the first of those links has 192.168.0.0/16 marked as ‘false’ for globally reachable. Now, it’s true that 192.0.0.9/32 is marked ‘true’ for globally reachable, but I don’t think that anyone should be able to authenticate themselves as controlling that address, so no CA would issue a certificate containing that address. That’s a brave assumption. RFC6890 describes the 192.0.0.0/24 block as « Not usable unless by virtue of a more specific reservation » (Section 2.2.2, Table 7). Precisely what RFC7723 and RFC8155 do.
_______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
