EV cert support for Firefox

by Matt 29. May 2007 04:10

IE7 introduced support for Extended Validation SSL certificates (aka High Assurance certificates). Any time you hit a site with one of these certs, the address bar changes colour to green. I've previously posted links to a couple of sites Microsoft host that allows you to test this.

While scouring the net looking for ways of integrating this into a project that hosts IE's web browser, I came across this article on Wikipedia, which contained this link to a plugin to enable the nice green address bar in Firefox. And it's written by VeriSign, which is nice of them (considering other CA's certs are going to be in competition with them).

Unfortunately, its support is not as complete as IE7. Currently, it only knows about EV certs from VeriSign, Thawte and GeoTrust. (Wikipedia lists 7 other CA's that support EV.) But it's a good start.

And if you're interested in how EV certs are implemented, just download the Firefox .xpi file and change the extension to .zip. You can see it's got a certs folder, containing various new root certs for the CAs. I don't pretend to know why they need new root certs, or why the old ones can't be used. The chrome folder has a .jar file, which can again be renamed to .zip and extracted. This contains a bunch of css files, some images and some Javascript.

evcextension.js is the file with all the goodies. And it's here where you can really see how messy the EV implementation is. Each CA has their own OID that marks a cert as being EV. (OID is an object identifier. Think of it as the way a cert identifies each of it's properties.) And since each CA has their own, they're all different. So, the process is to walk the certificate chain. If the certificate contains one of the recognised OIDs, the hash of the chained root cert must match the expected hash of the OID matching CA's root cert.

Fairly simple process, but messy - the addin must know about all CAs, all of their root certs and the OID they choose to identify their version of EV. (And there are other parts to implement too, such as changes to the revocation list checking.) So any change to a CA root cert, or adding new, known CA's requires an update to the addin.

The above linked Wikipedia article lists 10 CA's. Theoretically, it should be easy to add support for all of them. Just add the OID's and the matching root certs. Of course, finding all the root certs might be a bit tricky, especially when there looks like there are new ones that need to be downloaded and installed. I wouldn't like to mess here - just leave it to the people who know about this stuff.

Of course, the nice test site run by Microsoft doesn't work because the Firefox addin doesn't know about Microsoft's test root cert. That is something that I wouldn't mind hacking.

So, now we know how to support EV certs. We've got to do a lot of leg work and find out all the CA's that support it, what their OID's are and what their root certs are. If any of them change, we won't get notified. If we do find out they've changed, it's an update to our implementation (and we'd have to be careful about putting that data in config - we don't want it hacked so that any cert can be labeled EV).

Wouldn't it be nice if Internet Explorer exposed its implementation for the rest of us to hook into, especially when hosting the WebBrowser control?


Comments (51) -

best suv
best suv
7/20/2011 10:35:15 PM #

Fantastic task I like your type! Would really like to right here your feedback on my website! I am also seeking for someone to help you me make websites!


luxury cars brands
luxury cars brands
7/21/2011 6:41:12 PM #

Is it ok if I quote your article in my monthly newsletter? I would think this article suits my topic perfectly. Well ya, thanks for posting this article.


best hybrid cars
best hybrid cars
7/22/2011 3:42:58 AM #

Hi, just required you to know I he added your website to my Google bookmarks due to your layout. But seriously, I consider your net web-site has 1 in the freshest theme I??ve came across. It extremely helps make studying your blogging site significantly easier.


direct consolidation loans
direct consolidation loans
8/2/2011 9:53:45 PM #

I wonder if he cheated on her? I remember he cheated on his previous wife with JLO so it wouldn’t be surprising.


Johnathon Paulson
Johnathon Paulson United States
1/15/2016 4:34:22 AM #

the style of keeping you connected with so many things of different types is awesome and you find it interesting everytime.


Elayne Kew
Elayne Kew United States
1/15/2016 6:24:05 AM #

Congrats! So glad to see this site getting the recognition it deserves, the world can always use a little more awesome.


Stanley Tocci
Stanley Tocci United States
1/15/2016 6:44:32 AM #

I love the dolphin saving you one.


Jerald Petula
Jerald Petula United States
1/15/2016 7:19:23 AM #

Let me be the first to say: Congrats, Neil! I've been following this site from day one, and have loved every single day of awesomeness that it has delivered. You deserve all the success coming your way. Keep it up!AWESOME!


Vonnie Thoen
Vonnie Thoen United States
1/15/2016 8:59:33 AM #

this is awesome like the book of awesome


Randy Nault
Randy Nault United States
7/20/2016 7:43:08 AM #

Wow very thorough article. Thanks


Pierre Jungen
Pierre Jungen United States
8/25/2016 4:13:05 AM #

That's a great post. hopefully you will also create a separate blog for smart home design which features home automation.


Deangelo Jandron
Deangelo Jandron United States
9/27/2018 5:45:34 PM #

I was suggested this web site by my cousin. I am not sure whether this post is written by him as no one else know such detailed about my problem. You are incredible! Thanks!


Elenore Rone
Elenore Rone United States
9/28/2018 1:17:04 AM #

Wow, amazing blog layout! How long have you been blogging for? you made blogging look easy. The overall look of your site is excellent, as well as the content!


Bronwyn Wilfinger
Bronwyn Wilfinger United States
9/28/2018 8:12:27 AM #

There are some interesting cut-off dates on this article however I don’t know if I see all of them middle to heart. There's some validity however I'll take hold opinion till I look into it further. Good article , thanks and we want more! Added to FeedBurner as well


Jaunita Cheslak
Jaunita Cheslak United States
9/28/2018 6:22:52 PM #

Along with every thing which appears to be developing inside this particular area, many of your viewpoints are actually very stimulating. Having said that, I beg your pardon, because I can not give credence to your entire idea, all be it exhilarating none the less. It seems to everybody that your remarks are generally not entirely rationalized and in fact you are yourself not fully convinced of your point. In any event I did enjoy reading it.


Freddy Ruley
Freddy Ruley United States
9/29/2018 12:26:46 AM #

very good post, i certainly adore this site, persist with it


Zelda Demoranville
Zelda Demoranville United States
9/29/2018 6:39:13 AM #

I’m not that much of a internet reader to be honest but your blogs really nice, keep it up! I'll go ahead and bookmark your site to come back down the road. Many thanks


Melvin Karsh
Melvin Karsh United States
9/29/2018 5:51:09 PM #

A powerful share, I simply given this onto a colleague who was doing somewhat analysis on this. And he in truth bought me breakfast as a result of I found it for him.. smile. So let me reword that: Thnx for the deal with! But yeah Thnkx for spending the time to discuss this, I really feel strongly about it and love reading extra on this topic. If attainable, as you turn out to be expertise, would you mind updating your weblog with extra details? It's highly helpful for me. Huge thumb up for this weblog submit!


Loraine Sadeghi
Loraine Sadeghi United States
9/29/2018 8:00:06 PM #

Your blog would increase in ranking if you post more often.“*;:


Fannie Lule
Fannie Lule United States
9/30/2018 5:08:49 AM #

I’d should talk with you here. Which isn’t something I usually do! I love reading an article that should get people to feel. Also, many thanks for allowing me to comment!


Kathrine Cifaldi
Kathrine Cifaldi United States
10/9/2018 12:38:30 AM #

Hi there,  You have done a fantastic job. I’ll definitely digg it and for my part recommend to my friends. I'm confident they'll be benefited from this site.


Anthony Orbison
Anthony Orbison United States
10/9/2018 7:22:43 AM #

You could certainly see your expertise within the work you write. The world hopes for even more passionate writers such as you who aren't afraid to mention how they believe. Always follow your heart.


Jamey Mccartan
Jamey Mccartan United States
10/9/2018 11:00:59 PM #

Thank you for the auspicious writeup. It in fact was a amusement account it. Look advanced to more added agreeable from you! However, how could we communicate?


Winston Rollend
Winston Rollend United States
10/9/2018 11:13:26 PM #

You could definitely see your skills in the work you write. The world hopes for even more passionate writers like you who aren't afraid to say how they believe. Always follow your heart.


Nam Chapmond
Nam Chapmond United States
10/10/2018 8:13:06 AM #

Wonderful beat ! I wish to apprentice while you amend your web site, how can i subscribe for a blog site? The account aided me a acceptable deal. I had been a little bit acquainted of this your broadcast provided bright clear idea


精雕五官 Juvederm 透明質酸
精雕五官 Juvederm 透明質酸 United States
10/11/2018 3:27:19 AM #

由全球生長因子與胜肽韓國廠商CAREGEN研發,利用美國專利「KP7-4胜肽技術」,獨特滲透配方提供高穩定、高滲透、高效能的胜髮環境,模擬人體生髮機制,目的使頭皮、毛囊恢復健康及作用活性,重啟生髮系統。DR CYJ髮胜肽療程的治療原理為 利用複合活性成分配方恢復毛髮平衡, 根據生態生物工程原理研發, 關鍵胜肽名為KP7-4,結合了七種專利胜肽, 實驗證明能有效模擬「人體胜髮因子」,掌握育髮四關鍵:毛囊強健、減緩異常落髮、強化髮根、供給毛囊血管營養,模擬毛髮循環機制,同時減緩異常落髮及強化髮根。DR.CYJ髮胜肽不含藥性且無副作用,能有效促進增髮


Casey Capata
Casey Capata United States
10/11/2018 7:43:16 AM #

It's best to participate in a contest for one of the best blogs on the web. I'll advocate this site!


Doreen Lanigan
Doreen Lanigan United States
10/11/2018 12:14:43 PM #

My husband and i ended up being quite glad that Jordan could finish up his research via the ideas he was given when using the web site. It is now and again perplexing to just possibly be giving for free guidance that many people might have been trying to sell. And now we acknowledge we've got the website owner to appreciate for this. All of the explanations you've made, the simple website navigation, the friendships you aid to engender - it is mostly superb, and it's facilitating our son and our family believe that this topic is enjoyable, which is especially indispensable. Many thanks for the whole thing!


醫學美容 零食 cosmetic.wiki
醫學美容 零食 cosmetic.wiki United States
10/11/2018 4:40:04 PM #

輕透底妝-商品清單一覽   商品一覽 輕透底妝商品清單一覽,提供所有輕透底妝產品清單一覽,以UrCosme指數高至低排序,共49件輕透底妝的搜尋結果之第1頁。       


Nathanial Epling
Nathanial Epling United States
10/11/2018 4:42:49 PM #

Somebody essentially assist to make severely posts I might state. That is the first time I frequented your website page and thus far? I amazed with the analysis you made to create this actual post amazing. Wonderful task!


Delisa Rosengren
Delisa Rosengren United States
10/12/2018 5:46:11 AM #

This is the suitable blog for anyone who desires to find out about this topic. You notice a lot its virtually laborious to argue with you (not that I truly would need…HaHa). You undoubtedly put a brand new spin on a subject thats been written about for years. Great stuff, just great!


Melissia Rydin
Melissia Rydin United States
10/14/2018 1:20:54 AM #

Hiya! I simply wish to give a huge thumbs up for the good info you have here on this post. I can be coming back to your weblog for more soon.


Doria Banter
Doria Banter United States
10/14/2018 10:54:01 PM #

Oh my goodness! a tremendous article dude. Thanks Nonetheless I am experiencing challenge with ur rss . Don’t know why Unable to subscribe to it. Is there anyone getting similar rss problem? Anyone who is aware of kindly respond. Thnkx


醫學美容 眼眉 cosmetic.wiki
醫學美容 眼眉 cosmetic.wiki United States
10/16/2018 3:42:57 PM #

MAYBELLINE 媚比琳 【眼部彩妝】星礦綻光雙色眼影的商品介紹  UrCosme (@cosme TAIWAN) 商品資訊  MAYBELLINE 媚比琳,眼部彩妝,星礦綻光雙色眼影,有網友推薦最新19        


Douglass Epifano
Douglass Epifano United States
10/18/2018 4:44:32 AM #

great points altogether, you just gained a brand new reader. What would you recommend about your post that you made some days ago? Any positive?


Darell Search
Darell Search United States
10/19/2018 3:50:59 AM #

I liked as much as you will obtain carried out proper here. The comic strip is attractive, your authored subject matter stylish. however, you command get bought an shakiness over that you wish be turning in the following. in poor health unquestionably come further until now once more since exactly the similar nearly very steadily inside of case you shield this increase.


Bernadine Locket
Bernadine Locket United States
10/19/2018 9:29:58 PM #

Thanks  for another wonderful article. Where else could anybody get that kind of information in such an ideal way of writing? I have a presentation next week, and I'm on the look for such information.


Sheila Haygood
Sheila Haygood United States
10/20/2018 10:32:12 AM #

When I originally commented I clicked the "Notify me when new comments are added" checkbox and now each time a comment is added I get four emails with the same comment. Is there any way you can remove people from that service? Appreciate it!


醫學美容 加厚 cosmetic.wiki
醫學美容 加厚 cosmetic.wiki United States
10/20/2018 10:39:11 PM #

Boots 博姿 【草本概念系列】芸彩腮紅 Cheek Colour的商品介紹   Boots 博姿,草本概念系列,芸彩腮紅 Cheek Colour       


Denver Torgeson
Denver Torgeson United States
10/21/2018 12:17:26 AM #

I believe this is one of the such a lot vital information for me. And i am happy reading your article. But should observation on some common issues, The web site taste is wonderful, the articles is in point of fact excellent : D. Just right process, cheers


Vernita Sakai
Vernita Sakai United States
10/23/2018 11:45:01 PM #

Amazing! This blog looks just like my old one! It's on a totally different topic but it has pretty much the same page layout and design. Superb choice of colors!


Rick Valliere
Rick Valliere United States
11/6/2018 9:56:41 PM #

You really make it seem so easy with your presentation but I find this matter to be actually something which I think I would never understand. It seems too complicated and very broad for me. I'm looking forward for your next post, I?ll try to get the hang of it!


Rickey Wynkoop
Rickey Wynkoop United States
11/10/2018 10:15:14 PM #

Good day! This is kind of off topic but I need some help from an established blog. Is it difficult to set up your own blog? I'm not very techincal but I can figure things out pretty quick. I'm thinking about setting up my own but I'm not sure where to start. Do you have any points or suggestions?  Thanks


Royce Muraco
Royce Muraco United States
11/11/2018 9:03:43 PM #

you're truly a excellent webmaster. The website loading pace is incredible. It sort of feels that you're doing any unique trick. Moreover, The contents are masterwork. you have done a excellent process on this subject!


Julian Buetow
Julian Buetow United States
11/12/2018 6:59:07 PM #

The when I read a blog, Hopefully which it doesnt disappoint me approximately that one. What i’m saying is, It was my choice to read, but I just thought youd have something intriguing to convey. All I hear is actually a few whining about something that you could fix should you werent too busy looking for attention.


Tena Severyn
Tena Severyn United States
11/15/2018 7:32:00 PM #

Yay google is my king    aided me to find this great  website  ! .


Kam Rendler
Kam Rendler United States
11/17/2018 8:42:37 PM #

When I originally commented I clicked the "Notify me when new comments are added" checkbox and now each time a comment is added I get three e-mails with the same comment. Is there any way you can remove me from that service? Thanks a lot!


Todd Barreras
Todd Barreras United States
11/18/2018 6:06:27 AM #

My brother suggested I might like this web site. He was totally right. This post actually made my day. You can not imagine simply how much time I had spent for this info! Thanks!


Leandro Domek
Leandro Domek United States
11/18/2018 11:41:00 AM #

Hi there! I know this is kinda off topic however , I'd figured I'd ask. Would you be interested in exchanging links or maybe guest writing a blog article or vice-versa? My website discusses a lot of the same subjects as yours and I believe we could greatly benefit from each other. If you're interested feel free to shoot me an email. I look forward to hearing from you! Excellent blog by the way!


Terese Saurer
Terese Saurer United States
11/18/2018 6:17:28 PM #

I'm really enjoying the theme/design of your web site. Do you ever run into any internet browser compatibility problems? A few of my blog readers have complained about my website not operating correctly in Explorer but looks great in Chrome. Do you have any advice to help fix this problem?


Elmo Edelson
Elmo Edelson United States
11/18/2018 6:48:27 PM #

I just like the helpful information you supply to your articles. I will bookmark your blog and take a look at again right here frequently. I am moderately sure I’ll be informed lots of new stuff proper here! Best of luck for the following!


Add comment

  • Comment
  • Preview


Month List


Comment RSS