1615069 - Support Delegated Credentials OID in certviewer

Status: NEW

(Firefox :: Security, enhancement, P2)

Description

[J.C. Jones [:jcj] (he/him)]

This is copying from https://github.com/april/certainly-something/issues/66 -

OID 1.3.6.1.4.1.44363.44 is a draft ietf standard [0] which would be nice to simply decode to DelegationUsage or perhaps something like Credential Delegation authorized for compatible web servers.

https://dc.crypto.mozilla.org/ leads to a site with this in its cert, specifically to https://enabled.dc.crypto.mozilla.org/. Facebook also runs https://www.fbdelegatedcredentials.com/ with the same OID available.

[0] https://datatracker.ietf.org/doc/draft-ietf-tls-subcerts/

Comment 1

[Johann Hofmann [:johannh]]

We have a bunch of contributors that could possibly pick this up. I know that OIDs are parsed in certDecoder.js but I don't really have too much insight into how that works. April, I think this code didn't change too much, would you mind giving this bug a few words of introduction on how to add new extensions and maybe specifically this one?

Thanks!

Comment 2

[April King [:April]]

Oh hey, sorry. I just noticed this.

When there is a new standard, I usually submit a request to PKI.js to support it:
https://github.com/PeculiarVentures/PKI.js/issues/231

And then the information should appear when calling .toJSON().