We have a technical control in place for systems that issue S/MIME certs in this CA hierarchy. Our systems use static cert templates from which end-entity certs are issued. Those templates include an EKU value, but do not use the serverAuth or anyExtendedKeyUsage values. _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
- Re: Request to enable EV for VeriSign Cla... Rick Andrews
- Re: Request to enable EV for VeriSign Cla... Nick Lamb
- Re: Request to enable EV for VeriSign Class 3 G4 ECC root Kurt Roeckx
- Re: Request to enable EV for VeriSign Class 3 G4 ECC root Ryan Sleevi
- Re: Request to enable EV for VeriSign Class 3 G4 ECC root Charles Reiss
- Re: Request to enable EV for VeriSign Class 3 G4 ECC root Rick Andrews
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... Richard Barnes
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... Rick Andrews
- Re: Request to enable EV for VeriSign Class 3 G4 ECC root Nick Lamb
- Re: Request to enable EV for VeriSign Class 3 G4 ECC root sanjay_modi
- Re: Request to enable EV for VeriSign Class 3 G4 ECC root sanjay_modi
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... Andrew Ayer
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... Kathleen Wilson
- Re: Request to enable EV for VeriSign Class 3 G4 ... Peter Kurrasch
- Re: Request to enable EV for VeriSign Class 3... Matt Palmer
- Re: Request to enable EV for VeriSign Class 3 G4 ... Gervase Markham
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... Nick Lamb
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... sanjay_modi
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... Nick Lamb
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... sanjay_modi
- Re: Request to enable EV for VeriSign Class 3 G4 ECC ... sanjay_modi