Re: EV Policy OIDs (was Re: Identrust Commercial Root CA 1 EV Request)

2018-11-13 Thread Wayne Thayer via dev-security-policy
I've added a page to our wiki that describes how Firefox determines if a particular website received the EV UI: https://wiki.mozilla.org/CA/EV_Processing_for_CAs I mentioned this at the last CA/Browser Forum meeting and I hope it is useful to CAs - especially those who are dealing with

Re: EV Policy OIDs (was Re: Identrust Commercial Root CA 1 EV Request)

2018-09-20 Thread Wayne Thayer via dev-security-policy
Hi Nick, Good question. Mozilla is currently strongly encouraging CAs to use the CAB Forum EV OID, but not requiring it. I would be interested to hear arguments for or against requiring the use of the CAB Forum EV OID in future Mozilla root store updates. Requiring this might eventually solve

EV Policy OIDs (was Re: Identrust Commercial Root CA 1 EV Request)

2018-09-20 Thread Nick Lamb via dev-security-policy
On Tue, 18 Sep 2018 17:53:34 -0700 Wayne Thayer via dev-security-policy wrote: > ** EV Policy OID: 2.23.140.1.1 This reminds me of a question I keep meaning to ask. I know Microsoft has been trying to get CAs to use 2.23.140.1.1 for EV and knock it off with the arbitrary policy OIDs, does