Kurt Roeckx via dev-security-policy <[email protected]> writes:
>Both the localityName and stateOrProvinceName are Almere, while the province >is Flevoland. How much checking is a CA expected to do here? I know that OV and DV certs are just "someone at this site responded to email" or whatever, but for an EV cert how much further does the CA actually have to go? When e-Szignó Hitelesítés-Szolgáltató in Hungary certifies Autolac Car Services, Av Los Frutales 487 urb., Lima, Peru, are they expected to verify that it's really in Av Los Frutales and not Los Tolladores, or do they just go ahead and issue the cert? Can someone point to the bit of the BR that says that this is obviously right or wrong? Peter. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy
