Alaric Dailey wrote:
you can not be assured that the cert hasn't been stolen
If the cert has been stolen and not revoked I think you're screwed anyway... The whole point of certs is that the cert "is" you. If someone steals it, they can impersonate you.
My intention of my last email and this one, is to show that EV certs aren't what they are cracked up to be
I'm not sure anyone seriously thinks they are. ;) See belzner's posts. -Boris _______________________________________________ dev-security mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security
