Re: Defining an SRV RR Other name in pkix

[Sam Hartman <hartmans-ietf@xxxxxxx>]

>>>>> "Stefan" == Stefan Santesson <stefans@xxxxxxxxxxxxx> writes:

    Stefan> Sam, May I just ask for a clarification.

    Stefan> What do you mean by "that way"


So, the SRV record is currently about mapping a name supplied by the
user into a name of a location.  We all agree that the name supplied
by the user should be used for certificate authentication.

You propose to take a registry associated with SRV records--the
application spe.specific label--and make that a security registry for
distinguishing applications in certificates.


That's extending the scope of the metadata associated with SRV.  That
extension needs to be something the DNS community is happy with.