1

If I purchase an EV SSL certificate for a site that is using static content from a non-EV SSL site does that effect the EV SSL certificate presentation on the main www site? For example:

www.example.com (uses an EV SSL certificate) static.example.com (uses a standard SSL certificate)

Will users on www.example.com still see the green bar with the company name if the CSS and images are being served from static.example.com?

Falcon Momot
  • 25,244
  • 15
  • 63
  • 92
Hibbie
  • 21
  • 2

1 Answers1

3

The insecure content blocking functionality is implemented by each browser and not really standardized. However, I do not know of any browser that is doing this.

Browsers display the green bar when the certificate presented has an EV policy OID, which are looked up in a list the browser ships with. I don't know of any browser that implements exceptions to this rule for remote includes from https:// locations without EV, though this isn't to say that in the future nobody will think this is a good idea and implement it.

Falcon Momot
  • 25,244
  • 15
  • 63
  • 92