[kdw]

Am I correct in thinking that a wildcard only gets you one level deep? e.g. that *.mycorp.com matches "foo.mycorp.com" but not "foo.bar.mycorp.com"?

[bensummers]

Depends on the browser, which in practice means just one level deep.