BK Comments 8

[Nat Sakimura]

Section 8

   HTTP clients MUST also verify the TLS server certificate, using
   subjectAltName dNSName identities as described in [RFC6125], to avoid
   man-in-the-middle attacks.  The rules and guidelines defined in

It's probably easier to just say "using DNS-ID [RFC6125], to avoid
man-in-the-middle attacks".

[Nat Sakimura]

Fixed issue #90.

→ <<cset a6e45505ba84>>

[Nat Sakimura]

Pull request not applied yet.

[Nat Sakimura]

FIxing #90.

→ <<cset d9d929775b0f>>

[Nat Sakimura]

Merged in Nat-Sakimura/issue-90-DNS-ID (pull request #20)

FIxing #90.

→ <<cset 26534e8be933>>