On Mar 27, 2008, at 9:37 PM, Cullen Jennings wrote: > > There was one site I work with a bit that I remembered used Thawte > certificates so I connected to see what it does. Does not look like it > uses SAN. >
So the model is this: Use a CERT with SAN and EKU if you can. If you receive a cert with one or both, validate them and evaluate them appropriately. If you get a cert that has neither, proceed as usual. SHOULD use in cert, MUST validate if present. -- Dean _______________________________________________ Sip mailing list https://www.ietf.org/mailman/listinfo/sip This list is for NEW development of the core SIP Protocol Use [EMAIL PROTECTED] for questions on current sip Use [EMAIL PROTECTED] for new developments on the application of sip
