Date: | Thu, 20 Mar 2014 16:08:35 -0400 |
From: | Nalin Dahyabhai <nalin@redhat.com> |
To: | krb5-bugs@mit.edu |
Subject: | International domain names |
We don't seem to have any specific support for international domain
names when specifying KDC names.
MS-KKDCP support, being based on HTTPS, will probably require that we
also start checking the name recorded in the server's certificate.
RFC6125 and RFC6818 look to be decent starting points for what we should
aim for there, though support for them doesn't appear all that
widespread in other applications yet.
Thanks,
Nalin
names when specifying KDC names.
MS-KKDCP support, being based on HTTPS, will probably require that we
also start checking the name recorded in the server's certificate.
RFC6125 and RFC6818 look to be decent starting points for what we should
aim for there, though support for them doesn't appear all that
widespread in other applications yet.
Thanks,
Nalin