Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

What's the procedure a certificate authority (CA) must follow to get internationally recognized, like Verisign or GlobalSign?

share|improve this question

1 Answer 1

To be intentionally recognized, the trusted certificate authorities (CAs) will need to get their root certificates pre-bundled with specific web browsers and operating systems (OS), like Microsoft Internet Explorer, Apple Safari, Mozilla Firefox, Google Chrome and Opera (et al.). The trusted root certificate list is usually updated periodically to add or remove certificates.

In addition, specific programs like Java or Adobe have their own trusted root CAs which is used in their applications (thanks paj28 for the reminder!). Adobe has a setting which allows all Windows root certificates to be trusted automatically. However, I think the process is not so straightforward in Java.

To be included in Microsoft's Root Certificate Program,

The CA must provide the information requested below, and receive preliminary approval for membership in the Program.

Similarly, Apple's Root Certificate Program requires root certificate authorities to meet certain criteria. This goes on for other browsers.

Other web browsers/OS may have their own specific requirements and legal agreements. Hence, to be as recognized as "internationally" as possible, a CA usually needs to contact all the major OS and web browser developers to obtain permission to be included in each pre-installed list of trusted root CA certificates.

share|improve this answer
2  
There's more than just browsers - Java has its own cert store, as do many operating systems –  paj28 May 5 at 10:33
    
what @paj28 said. And each one of course has its own process, requirements, etc... –  AviD May 5 at 12:47
    
@paj28 thanks for pointing out. I had edited accordingly. –  jingyang May 6 at 1:29

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.