Alex Gaynor added the comment:

This came up on m.d.s.p. today: 
https://groups.google.com/d/msg/mozilla.dev.security.policy/K3sk5ZMv2DE/fx6c3WWFBgAJ

I haven't dug in deeply, but it sounds like we handle IDNs in CNs and SANs 
differently?

I think we should look for a way to solve that specific problem, without biting 
off the whole thing -- one solution would be to simply drop support for CNs in 
match_hostname, as both Chrome and Firefox have already done :-)

----------
nosy: +alex

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue28414>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to