[cabfpub] CA Survey
sleevi at google.com
Fri Mar 21 18:19:28 UTC 2014
CAs that do not implement pre-certs will be relying on their customers
supporting OCSP Stapling or RFC 6962 TLS extension if their customer wish
to have EV treatment. Absent both pre-certs and these server methods, the
sites will not be granted EV treatment.
On Fri, Mar 21, 2014 at 1:50 AM, Chema López González <
clopez at firmaprofesional.com> wrote:
> Thanks for the update.
> One concern we have is how is going to be matched the survey results
> regarding the willing of the CAs to implement pre-certs (14 No vs 4 Yes of
> 22 -taken into account Firmaprofesional answer-) with this statement?
>> "Important note: most TLS servers do not support OCSP Stapling or the RFC
>> 6962 TLS extension, so CAs should be prepared to insert SCTs into issued
>> certificates to maintain the EV indication."
> *Chema López*
> *Gestor de Proyectos - Departamento Técnico*
> *AC Firmaprofesional, S.A.*
> Edificio ESADECREAPOLIS - 1B13
> 08173 Sant Cugat del Vallès, Barcelona.
> T. 934 774 245
> M. 666 429 224
> On Wed, Mar 19, 2014 at 12:54 PM, Ben Laurie <benl at google.com> wrote:
>> Apologies for the long delay in collating the results of the survey we
>> sent out last year.
>> We decided, in response to several requests, to aggregate the
>> responses to the questions about software versions.
>> The results, such as they are, are here:
>> If I've missed anyone, many apologies - do get in touch if that's the
>> case. Similarly, if anyone didn't respond but would like to now,
>> please let me know.
>> Public mailing list
>> Public at cabforum.org
> Public mailing list
> Public at cabforum.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Public