Hi Paul, On Mon, Oct 28, 2019 at 2:41 PM Paul Walsh via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote:
> [PW] So you dislike Mozilla’s implementation for the tracker icon in the > address bar? When you update to 70.0 you’re prompted with an > educational-type pop-out to draw your attention to the visual indicator. Do > you think that’s a bad idea? Do you think users should just know how to use > browser software? > > This repeated comparison of the EV indicator to the privacy shield is apples to orangutans. The security and privacy of a Firefox user doesn't depend on them interacting with the privacy shield. If a user never notices the privacy shield, that user will be as secure as one who examines it on every page load. It follows that there is no need for users to be properly trained to interact with the privacy shield to protect themselves. This gets to the root of the problem with the EV UI as a positive security indicator. - Wayne _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
