Back to all discussions

  •   about 14 years ago

Adding name constraints to MintChip's certificate authority?

While looking at MintChip's hosted API's security, I noticed that the MintChip certificate authority's certificate doesn't list any name constraints (see [0]).

Would it be possible for some to be added?

[0]: http://blog.codekills.net/2012/04/07/a-first-look-at-mintchip's-hosted-api's-crypto/#the-certificate-authority-s-certificate

  • 1 comment

  •   •   about 14 years ago

    Ok, so further research suggests that the name constraints field is ignored by most implementations… So it wouldn't provide very much *practical* security. But it would still be nice to see :)

Comments are closed.