* Eddy Nigg: >> Is the current certificate on https://www.verisign.com/ an EV >> certificate? It lacks a physical address, which is required by (my >> reading of) the guidelines. >> > Good catch!
Hmm, street address seems to be optional after all. But I don't quite understand why the certificate says both Wilmington and Mountain View. > More than that, it was signed and issued long before the EV > guidelines were approved (How could they know what the guidelines > will be?). Have they been approved yet? The cabforum.org web site is unclear. > And even more disturbing is the fact, that the certificate is valid > for a period of _two_ years, whereas the guidelines speak strictly > about _ONE_ year only!!!! Uhm, a maximum of 27 months is permitted. > And now to all the EV supporters: > Isn't EV already flawed by the biggest certification authority? My question to the EV opponents: Can't you continue to offer domain-validated certificates? 8-) _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
