Apple's browser seems to have the best Extended Validation (EV) support now. FWIW, the webpki crate (Rust) doesn't support EV (certificate policies or related extensions) at all: https://github.com/briansmith/webpki/blob/68fcf3dd3b7f90fc51ebde1397da7b6f5d1e4034/src/cert.rs#L153-L155 ….
-
-
PKIX specs (RFC 5280) were probably written w/ the expectation that products would implement most/all of the complexity specified. However much is technically optional. mozilla::pkix (webpki even moreso) takes advantage of those technicalities to implement as little as possible.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.