[Cryptography] Introducing the phone-directory certificate

[Viktor Dukhovni]

On Fri, Sep 04, 2015 at 12:43:37AM +1200, Peter Gutmann wrote:

>  however for the one that Google is currently serving up (at
> least that's visible in NZ) I'd like to propose a new name, the phone-
> directory certificate.

For "www.google.com", here in the US, I get just "www.google.com"
as a SAN, but for "google.com" the list has "just" 50 entries,
which is a great deal shorter than your impressive 502!  What
transport address and SNI hint (if any) got you the phone directory?

    DNS:*.android.com
    DNS:*.appengine.google.com
    DNS:*.cloud.google.com
    DNS:*.google-analytics.com
    DNS:*.google.ca
    DNS:*.google.cl
    DNS:*.google.co.in
    DNS:*.google.co.jp
    DNS:*.google.co.uk
    DNS:*.google.com
    DNS:*.google.com.ar
    DNS:*.google.com.au
    DNS:*.google.com.br
    DNS:*.google.com.co
    DNS:*.google.com.mx
    DNS:*.google.com.tr
    DNS:*.google.com.vn
    DNS:*.google.de
    DNS:*.google.es
    DNS:*.google.fr
    DNS:*.google.hu
    DNS:*.google.it
    DNS:*.google.nl
    DNS:*.google.pl
    DNS:*.google.pt
    DNS:*.googleadapis.com
    DNS:*.googleapis.cn
    DNS:*.googlecommerce.com
    DNS:*.googlevideo.com
    DNS:*.gstatic.cn
    DNS:*.gstatic.com
    DNS:*.gvt1.com
    DNS:*.gvt2.com
    DNS:*.metric.gstatic.com
    DNS:*.urchin.com
    DNS:*.url.google.com
    DNS:*.youtube-nocookie.com
    DNS:*.youtube.com
    DNS:*.youtubeeducation.com
    DNS:*.ytimg.com
    DNS:android.com
    DNS:g.co
    DNS:goo.gl
    DNS:google-analytics.com
    DNS:google.com
    DNS:googlecommerce.com
    DNS:urchin.com
    DNS:youtu.be
    DNS:youtube.com
    DNS:youtubeeducation.com

-- 
	Viktor.