Re: Organization info in certs not being properly recognize by Firefox

2014-11-12 Thread John Nagle
I've been working on this problem from the relying party side. I've analyzed every SSL certificate on the web, using the U. Michigan data set, to look for OV certs which cover multiple unrelated domains. The results are in the paper linked here: http://john-nagle.github.io/certscan/

Re: Clarification about WebTrust BR and WebTrust EV audits

2014-11-12 Thread Ryan Sleevi
On Tue, November 11, 2014 2:12 pm, Kathleen Wilson wrote: On 11/7/14, 2:51 PM, Ryan Sleevi wrote: In order for Mozilla to recognize a root as EV, it must first be recognized as a root for SSL certificate issuance. If a certificate is issued by that root as non-EV, it will still be