Skip to content

Add lint to address Ballot SC-086v3 (Sunset the Inclusion of IP Reverse Address Domain Names)#1030

Merged
christopher-henderson merged 8 commits into
zmap:masterfrom
defacto64:arpa_domain_not_allowed
Mar 22, 2026
Merged

Add lint to address Ballot SC-086v3 (Sunset the Inclusion of IP Reverse Address Domain Names)#1030
christopher-henderson merged 8 commits into
zmap:masterfrom
defacto64:arpa_domain_not_allowed

Conversation

@defacto64

Copy link
Copy Markdown
Contributor

CAB Forum's Ballot SC-086v3 (Sunset the Inclusion of IP Reverse Address Domain Names), incorporated in CABF TLS BRs v2.2.0, provides that...

Effective 2026-03-15, CAs SHALL NOT issue certificates containing domain names that end in an IP Reverse Zone Suffix.

This lint implements the relevant check.

@christopher-henderson christopher-henderson left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very clean and very easy, thank you!

@christopher-henderson christopher-henderson merged commit b536041 into zmap:master Mar 22, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants