On 22/04/15 18:02, Viktor Dukhovni wrote: > Are you doing anything about server certificate name checks? If
> the next-hop domain is in UTF-8 form, the a-label form is what
> needs to be compared against the DNS-ID in SAN extensions or the
> CN-ID in the subject name if applicable.
Fair point. I need to add that.
> Are bounces to UTF-8 envelope senders treated as EAI messages?