| Index: net/cert/cert_verify_proc_win.cc
|
| diff --git a/net/cert/cert_verify_proc_win.cc b/net/cert/cert_verify_proc_win.cc
|
| index a4e3941a7899ca625342b3bccc33d09f29666dc7..28867677b14bac8217f44b5c630b72e23878fd8b 100644
|
| --- a/net/cert/cert_verify_proc_win.cc
|
| +++ b/net/cert/cert_verify_proc_win.cc
|
| @@ -942,7 +942,11 @@ int CertVerifyProcWin::VerifyInternal(
|
| chain_para.RequestedIssuancePolicy.Usage.cUsageIdentifier = 1;
|
| chain_para.RequestedIssuancePolicy.Usage.rgpszUsageIdentifier =
|
| &ev_policy_oid;
|
| - break;
|
| +
|
| + // De-prioritize the CA/Browser forum Extended Validation policy
|
| + // (2.23.140.1.1). See crbug.com/705285.
|
| + if (!EVRootCAMetadata::IsCaBrowserForumEvOid(ev_policy_oid))
|
| + break;
|
| }
|
| }
|
| }
|
|
|