{"action":"created","issue":{"url":"https://api.github.com/repos/httpwg/http-extensions/issues/178","repository_url":"https://api.github.com/repos/httpwg/http-extensions","labels_url":"https://api.github.com/repos/httpwg/http-extensions/issues/178/labels{/name}","comments_url":"https://api.github.com/repos/httpwg/http-extensions/issues/178/comments","events_url":"https://api.github.com/repos/httpwg/http-extensions/issues/178/events","html_url":"https://github.com/httpwg/http-extensions/issues/178","id":155739692,"number":178,"title":"Wildcard names","user":{"login":"martinthomson","id":67641,"avatar_url":"https://avatars.githubusercontent.com/u/67641?v=3","gravatar_id":"","url":"https://api.github.com/users/martinthomson","html_url":"https://github.com/martinthomson","followers_url":"https://api.github.com/users/martinthomson/followers","following_url":"https://api.github.com/users/martinthomson/following{/other_user}","gists_url":"https://api.github.com/users/martinthomson/gists{/gist_id}","starred_url":"https://api.github.com/users/martinthomson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/martinthomson/subscriptions","organizations_url":"https://api.github.com/users/martinthomson/orgs","repos_url":"https://api.github.com/users/martinthomson/repos","events_url":"https://api.github.com/users/martinthomson/events{/privacy}","received_events_url":"https://api.github.com/users/martinthomson/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/httpwg/http-extensions/labels/design","name":"design","color":"02d7e1"},{"url":"https://api.github.com/repos/httpwg/http-extensions/labels/origin-frame","name":"origin-frame","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-05-19T13:42:14Z","updated_at":"2016-08-20T01:17:38Z","closed_at":null,"body":"If an origin has a wildcard certificate, the origin frame allows it to narrow scope.  But if we accept #177, then there is the potential for the origin to lose any claim to wildcards without enumerating the entire space (at high cost and with a privacy risk).  One way to avoid that would be to support the use of a wildcard.  The rules in RFC2818 are probably appropriate."},"comment":{"url":"https://api.github.com/repos/httpwg/http-extensions/issues/comments/241169317","html_url":"https://github.com/httpwg/http-extensions/issues/178#issuecomment-241169317","issue_url":"https://api.github.com/repos/httpwg/http-extensions/issues/178","id":241169317,"user":{"login":"mnot","id":74384,"avatar_url":"https://avatars.githubusercontent.com/u/74384?v=3","gravatar_id":"","url":"https://api.github.com/users/mnot","html_url":"https://github.com/mnot","followers_url":"https://api.github.com/users/mnot/followers","following_url":"https://api.github.com/users/mnot/following{/other_user}","gists_url":"https://api.github.com/users/mnot/gists{/gist_id}","starred_url":"https://api.github.com/users/mnot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mnot/subscriptions","organizations_url":"https://api.github.com/users/mnot/orgs","repos_url":"https://api.github.com/users/mnot/repos","events_url":"https://api.github.com/users/mnot/events{/privacy}","received_events_url":"https://api.github.com/users/mnot/received_events","type":"User","site_admin":false},"created_at":"2016-08-20T01:17:38Z","updated_at":"2016-08-20T01:17:38Z","body":"See recent changes; they define the origin(s) that the connection is authoritative for as the starting Origin Set -- including wildcard certs.\r\n\r\nThis doesn't allow a wildcard cert to be added; e.g., if Mike's certs draft eventually allows you to add a wildcard cert to the connection, you'd have to enumerate each origin covered by the wildcard to get them into the origin set. \r\n\r\nSo, the remaining question is whether we want to allow wildcards into the origin syntax itself."}}
{"actor":{"display_login":"mnot"}}