Manger, James H wrote:
How about using UTF8String, instead of IA5String? The latter does not gain much (it can still include chars such as 0x00, newline, bell that are presumably not valid in SRV RR names), while the former should be more future-proof.
SRVRRName ::= UTF8String
It's already really a pity that dNSName forces us to store SAN in ACE encoding, instead of being able to put the real unicode value, so I'm all for not doing the mistake again.Could you post the suggestion to the pkix list to see if there are any other reactions?