Certificate Transparency

Rob Stradling rob.stradling at comodo.com
Wed Nov 11 11:11:40 UTC 2015


On 11/11/15 11:03, locojohn wrote:
> Joó Ádám Wrote:
> -------------------------------------------------------
>
>> The TLS extension is the only method to implement Certificate
>> Transparency without the assistance of the CA, and starting with
>> January 1 2015 Chrome refuses to display the green bar for EV
>> certificates without Certificate Transparency.
>>
>> StartSSL is one CA that currently does not support other methods,
>> which means a lot of sites suffers from this.
>
> Interesting, we have installed multi-domain EV certificates from StartSSL
> for our company and we use Nginx, and EV green bar works in all modern and
> even not so modern browsers:
>
> https://www.ahlers.com

In Chrome 46, I see "https:" in green but I don't see the "EV green bar" 
that shows the Subject Organization Name.  That's because...

> I presume Certificate Transparency is not required then?

...CT _is_ required if you want to see the EV green bar in recent 
versions of Chrome.

> Best regards,
> Andrejs

-- 
Rob Stradling
Senior Research & Development Scientist
COMODO - Creating Trust Online



More information about the nginx mailing list