Wildcard DNS. Re: rfc 3280bis

["Anders Rundgren" <anders.rundgren@xxxxxxxxx>]

Certificates with wildcards are fairly widely used because they
can save you both hassles and money.

Issuer: https://www.godaddy.com/gdshop/ssl/ssl.asp?ci=8979  A major issuer of SSL certs.

That is, it does not matter what 3280bis says, this is de-facto standard
and I doubt that Microsoft intends to remove support for this in MSIE.

If an issuer creates a certificate for *.com it is a bad issuer while
*.mycompany.com is ok.  Bad issuers don't have their roots
deployed in browsers so I don't see what the problem is.  If
you have bad issuers nothing really helps.

Anders