Lines Matching full:trust
853 // TODO(wtc): A possible optimization is that we get the trust anchor from
854 // the first PKIXVerifyCert call. We look up the EV policy for the trust
855 // anchor. If the trust anchor has no EV policy, we know the cert isn't EV.
