> On 21 Aug 2016, at 3:07 PM, Kirk Hall <[email protected]> wrote: > > That’s good news, Ryan – some have said that no OIDs are permitted in > certificates except for those specified in the BRs and/or RFC 5280, etc. I > couldn’t see where that was specified so I thought I’d check with the > browsers. Sounds like Google has no objections to additional OIDs. > > Assuming the other browsers take the same position, then in the future when a > CA or a political jurisdiction wants extra markers in certificates for their > own purposes, the Forum and the browsers won’t have to get involved. > > Do Microsoft, Apple, and Mozilla agree?
Apple routinely adds extra OIDs to certificates we issue, in various places, and we think that doesn’t make them BR-noncompliant.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
