Index: net/cert/cert_verify_proc_win.cc |
diff --git a/net/cert/cert_verify_proc_win.cc b/net/cert/cert_verify_proc_win.cc |
index a4e3941a7899ca625342b3bccc33d09f29666dc7..28867677b14bac8217f44b5c630b72e23878fd8b 100644 |
--- a/net/cert/cert_verify_proc_win.cc |
+++ b/net/cert/cert_verify_proc_win.cc |
@@ -942,7 +942,11 @@ int CertVerifyProcWin::VerifyInternal( |
chain_para.RequestedIssuancePolicy.Usage.cUsageIdentifier = 1; |
chain_para.RequestedIssuancePolicy.Usage.rgpszUsageIdentifier = |
&ev_policy_oid; |
- break; |
+ |
+ // De-prioritize the CA/Browser forum Extended Validation policy |
+ // (2.23.140.1.1). See crbug.com/705285. |
+ if (!EVRootCAMetadata::IsCaBrowserForumEvOid(ev_policy_oid)) |
+ break; |
} |
} |
} |