Inquiry about AIA, Certificate Policies, and Inhibit AnyPolicy Extensions in Firefox Certificate Validation

49 views
Skip to first unread message

bruce lee

unread,
Nov 19, 2024, 10:06:01 AM11/19/24
to dev-pl...@mozilla.org

Hello Developers,

I'd like to ask if the Firefox browser utilizes the AIA extension, Certificate Policies extension, and the Inhibit AnyPolicy extension during the certificate validation process. This information is crucial for me, and I would greatly appreciate your patient response. Thank you!

Dana Keeler

unread,
Nov 19, 2024, 12:56:51 PM11/19/24
to bruce lee, dev-pl...@mozilla.org
Firefox uses the AIA extension to make OCSP requests for end-entity certificates. The certificate policies extension is used to determine if an end-entity is an EV certificate. If the inhibit anyPolicy extension is present during EV verification, the end-entity is considered to not be an EV certificate.

On Tue, Nov 19, 2024 at 7:06 AM bruce lee <pikaq...@gmail.com> wrote:

Hello Developers,

I'd like to ask if the Firefox browser utilizes the AIA extension, Certificate Policies extension, and the Inhibit AnyPolicy extension during the certificate validation process. This information is crucial for me, and I would greatly appreciate your patient response. Thank you!

--
You received this message because you are subscribed to the Google Groups "dev-pl...@mozilla.org" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dev-platform...@mozilla.org.
To view this discussion visit https://groups.google.com/a/mozilla.org/d/msgid/dev-platform/8c371ca1-5e7a-42c2-9b9b-c8189ee90849n%40mozilla.org.
Reply all
Reply to author
Forward
0 new messages