Dan Veditz wrote:
We fully expect crooked companies to get EV certs. All we hope is that the
EV process prevents them from getting a cert using a name that is not their
own. EV does not mean "safe".
Dan, thank you for confirming this! Your understanding of EV is perhaps correct, however this is not how it is presented, marketed and sold to the media, users of browsers and potential customers! The expectations are much higher than that! By giving EV a special treatment, the browser is raising the expectations even more...Nobody is expecting it to be only about identification, something which exists at various levels sufficiently already today...Isn't this going to be a problem?

--
Regards

Signer:      Eddy Nigg, StartCom Ltd.
Phone:       +1.213.341.0390

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to