[META] Extending Web PKI for local network devices

[tomoyukilabs]

This is a meta issue to collect and discuss ideas and proposals that would extend the current Web PKI model. Examples are:

• TLS certificate issuance integrated with DNS-SD
• TLS certificate issuance with out-of-band attestation challenge (see Approach #3 in A draft proposal for supporting local HTTPS communication. #2)

As you may know, Web PKI assumes that server certificates can be validated based on globally unique server names. In other words, locally unique device names might not be compatible with Web PKI. This meta issue is to explore possible extension or modification of Web PKI for local network devices.

Any comments or additional proposals are welcome!