Skip Menu |
 

Date: Thu, 20 Mar 2014 16:08:35 -0400
From: Nalin Dahyabhai <nalin@redhat.com>
To: krb5-bugs@mit.edu
Subject: International domain names
We don't seem to have any specific support for international domain
names when specifying KDC names.

MS-KKDCP support, being based on HTTPS, will probably require that we
also start checking the name recorded in the server's certificate.
RFC6125 and RFC6818 look to be decent starting points for what we should
aim for there, though support for them doesn't appear all that
widespread in other applications yet.

Thanks,

Nalin