[issue29824] Hostname validation in SSL match_hostname()

[Alex Gaynor]

Alex Gaynor added the comment:

An additional problem in (2) is that a cert for *.google _is_ legal if the CA can prove that a single organization controls the entire TLD:

https://crt.sh/?id=7668286

----------
nosy: +Alex Gaynor

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue29824>
_______________________________________