Hi Paul,

On Mon, Oct 28, 2019 at 2:41 PM Paul Walsh via dev-security-policy <
dev-security-policy@lists.mozilla.org> wrote:

> [PW] So you dislike Mozilla’s implementation for the tracker icon in the
> address bar? When you update to 70.0 you’re prompted with an
> educational-type pop-out to draw your attention to the visual indicator. Do
> you think that’s a bad idea? Do you think users should just know how to use
> browser software?
This repeated comparison of the EV indicator to the privacy shield is
apples to orangutans. The security and privacy of a Firefox user doesn't
depend on them interacting with the privacy shield. If a user never notices
the privacy shield, that user will be as secure as one who examines it on
every page load. It follows that there is no need for users to be properly
trained to interact with the privacy shield to protect themselves. This
gets to the root of the problem with the EV UI as a positive security

- Wayne
dev-security-policy mailing list

Reply via email to