I think that it's probably best for us to keep a single list of EV roots across platforms. (I still want to use the native root cert store, but I think the approach of maintaining the list of EV roots + OIDs is a good way to go for now). I am very leery of relying on undocumented APIs any more than we have to. -Ian
On Thu, Sep 11, 2008 at 3:11 PM, Wan-Teh Chang <[EMAIL PROTECTED]> wrote: > > On Thu, Sep 11, 2008 at 5:14 AM, Rob Stradling <[EMAIL PROTECTED]> wrote: > > > > If you do remove Chrome's own list of EV Policy OIDs and use the > > Windows list instead... > > What will the Linux and Mac versions do, given that Mozilla's list of > > EV Policy OIDs is in PSM, not NSS ? > > You are right. We will need to maintain our own list of EV Policy > OIDs for Linux and Mac, and this is only because the OS doesn't > provide the list. > > > Perhaps Chrome should retain its own list of EV Policy OIDs, which > > could be shared cross-platform. > > Or perhaps, Wan-Teh, you could ask Nelson, Kai et al to move Mozilla's > > list from PSM into NSS and then use that. > > I asked Kai about this. Looks like the best we can do is to put > Mozilla's list in a stand-alone file so we can share it more easily. > > Wan-Teh > > > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Chromium-dev" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/chromium-dev?hl=en -~----------~----~----~----~------~----~------~--~---
