Re: report on EV and SSL MITM proxying

On Mon, 21 Mar 2011 16:35:37 +0100, peter williams <home_pw@msn.com> wrote:
>
> In the EV world is there one such list, multiple such lists? Are the  
> lists
> per browser? Do the lists change with browser releases? Who controls the
> list? Who audits the issuer of the list etc.

Each browser currently have its own system for EV, and separate methods  
for updating it.

> Perhaps, most significantly, is the list in Opera browser in an (OEM) WII
> device the same as the public Opera build for PCs? Does the WII vendor
> decide who it wants in its root list, or EV list? Does the WII vendor for
> example have the power to define which EV sites are "recognized"?

The certificate repository can vary between platforms, some deliveries  
rely on the platform's SSL implementation, not Opera's, others are using a  
pre-shipped repository, some have reduced number of certificates due to  
size restrictions. There are other variations.

EV is only supported in versions that have enabled the support for the  
online certificate store, based on Opera Presto 2.2 or later (Opera 9.50  
was 2.1.1). The EV list is controlled by Opera.


-- 
Sincerely,
Yngve N. Pettersen
********************************************************************
Senior Developer		     Email: yngve@opera.com
Opera Software ASA                   http://www.opera.com/
Phone:  +47 23 69 32 60              Fax:    +47 23 69 24 01
********************************************************************

Received on Tuesday, 22 March 2011 01:52:44 UTC