I think we should consider disallowing commas in hosts. Allowing them seems rather problematic in combination with header values, where commas have a special meaning.