Multiple TLS libraries can bypass delegation enforcement

Overview This note covers thirteen library-specific records VU948176.6, .8–.19 of how widely used TLS libraries apply X.509 Name Constraints. The records describe cases where a constrained name may be accepted by one library and rejected by another. Some are fixed, some remain under review, and...