Eric raised an issue distinct from 'the value of EV' that I think is
important: Can certificate revocation be used as a form of censorship? As
HTTPS becomes the default state of the web, it becomes more important to
consider this issue and what should be done about it. I plan to discuss
this with others at Mozilla, and I welcome more discussion here on the
topic (perhaps in a new thread).
dev-security-policy mailing list