I see that Chrome already has some support for EV SSL Certificates -
for HTTPS sites that it recognizes as EV, Chrome displays the company
name in green text in the address bar.  I have a number of related
questions...

1. Do Google, as a browser creator, intend to join the CA/Browser
Forum (http://www.cabforum.org) ?

2. How can a CA get their Root Certificate i) added to Chrome's list
of Trusted Root Certificates, and ii) trusted for EV in Chrome?  What
are the technical requirements, audit requirements, etc?  Are these
instructions published anywhere?

3. Chrome on Windows appears to rely on the certificates found in the
Microsoft Trusted Root Certificate Store, but has its own list of EV
Policy OIDs (in net/base/ev_root_ca_metadata.cc).  Having done that,
why didn't you use the EV Policy OID metadata built in to the
Microsoft Trusted Root Certificate Store instead of creating your own
list?

4. How did you decide which CAs' EV Policy OIDs to add to the current
version of ev_root_ca_metadata.cc?  It looks suspiciously like
Mozilla's list, but with those Root Certificates not also present in
the Microsoft Root Certificate Program removed.  Am I right?

5. What Root Certificates will Chrome on Mac and Linux trust, since
the Microsoft Trusted Root Certificate Store is Windows-only?  Why
didn't you use Mozilla NSS's Root Certificate DB instead, since NSS is
already cross-platform?  (And then, why not use Mozilla PSM's list of
EV Policy OIDs instead?)

6. The EV UIs in IE7, Firefox 3 and Opera 9.50 all display a "green
bar" - either the entire address bar goes green, or the company name
is displayed on a green background.  Why have you apparently decided
to have no "green bar" for EV in Chrome?
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Chromium-dev" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/chromium-dev?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to