Note: My Web pages are best viewed with style sheets enabled. |
Unrated |
Version 2Jul07-1.0.3
The requirements documented in this Web site are not suitable for attesting that an extended validation certificate is appropriate for inclusion in a Web browser.
These requirements were developed with the assumption that an experienced, knowledgeable technical professional (e.g., a software engineer) could apply them during a review of a certificate authority's (CA's) documents and operations. On concluding that review, the reviewer would then provide a report on his or her findings and conclusions. The report would then be used by browser developers to determine whether the CA should have its root certificate installed. All this could be accomplished without resorting to an audit by a licensed professional auditor.
However, Part J (Compliance) of Guidelines for the Issuance And Management of Extended Validation Certificates clearly indicates in §35(d) that a licensed auditor is required for the approval of installing an EV certificate in a browser.
Last updated 14 November 2007
![]() David Ross home |
![]() |
![]() CA Review home |