The iodef property specifies a means of reporting certificate issue
requests or cases of certificate issue for the corresponding domain
that violate the security policy of the issuer or the domain name
The Incident Object Description Exchange Format (IODEF) [RFC5070] is
used to present the incident report in machine-readable form.
The iodef property takes a URL as its parameter. The URL scheme type
determines the method used for reporting:
mailto: The IODEF incident report is reported as a MIME email
attachment to an SMTP email that is submitted to the mail address
specified. The mail message sent SHOULD contain a brief text
message to alert the recipient to the nature of the attachment.
http or https: The IODEF report is submitted as a Web service
request to the HTTP address specified using the protocol specified