Subject: [websec] #56: Specify includeSubdomains directive for HPKP

From: "websec issue tracker" <[email-masked]>
Date: Thu, 08 Nov 2012 22:01:13 -0000

#56: Specify includeSubdomains directive for HPKP

 Example:

 Google.com PKP = key A, key B, includesubdomains
 WWW.Google.com PKP = key C

 Effective PKP?

 1) A, B, C (union)
 2) C (most specific)
 3) none (intersection)

 We think (2) is best.

-- 
-------------------------+-------------------------------
 Reporter:  palmer@…     |      Owner:  palmer@…
     Type:  defect       |     Status:  new
 Priority:  major        |  Milestone:
Component:  key-pinning  |    Version:
 Severity:  -            |   Keywords:  includeSubdomains
-------------------------+-------------------------------

Ticket URL: <http://trac.tools.ietf.org/wg/websec/trac/ticket/56>
websec <http://tools.ietf.org/websec/>

---

From: "websec issue tracker" <[email-masked]>
Date: Thu, 08 Nov 2012 22:01:29 -0000

Changes (by palmer@…):

 * status:  new => assigned

-- 
-------------------------------+-----------------------
 Reporter:  palmer@…           |       Owner:  palmer@…
     Type:  defect             |      Status:  assigned
 Priority:  major              |   Milestone:
Component:  key-pinning        |     Version:
 Severity:  -                  |  Resolution:
 Keywords:  includeSubdomains  |
-------------------------------+-----------------------

Ticket URL: <http://tools.ietf.org/wg/websec/trac/ticket/56#comment:1>
websec <http://tools.ietf.org/websec/>