Given that the security "zone" varies based on the TLD, how will the new TLS be handled?
For example: A browser may permit cookies to be shared and SSL certificates, and wildcard certificates
company.com( two layers deep)
company.co.uk( three layers deep)
local( one layer deep)
However cookies, cross site requests and more are banned by browsers as they all apply too broadly to TLDs
*.com(two layers deep)
*.co.uk(three layers deep)
With the new proposed TLDs, what will the new security scope be for both wildcard certificates, and SOP? Where is this published?
Is it expected that SOP and the scope of wildcard certificates to be equal?
Since there is no chance of every CA supporting the same policy when issuing certificates, and SOP is really dependant on all the browsers getting a consensus, how will browsers handle this?