On Mon, Dec 11, 2017 at 3:06 PM, Matthew Hardeman <[email protected]> wrote: > > The EV guidelines already encompass this information - the jurisdiction >> fields, combined with the serialNumber, which is the unique identifying >> number for that entity within the jurisdictional registry, which is unique >> per jurisdictional boundary. >> > > Sadly, the current parameters do not fully encompass the legal > possibilities. At a minimum, it is deficient that the purportedly > authoritative registry, as according to the CA, is not explicitly named. >
Are you aware of any jurisdictions where, if scoped as required by the EVGs, they would not serve as a full disambiguator as to the registry used? _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

