According to 
http://www.pcworld.com/article/id,132017-page,1/article.html Verisign 
has released a plugin to paint the Firefox address bar green when 
encountering an EV cert. An interesting comment is also here: 
http://financialcryptography.com/mt/archives/000927.html

/ Verisign's Tim Callan says that more than 500 Web sites, including 
sites run by eBay's PayPal division and ING Group, have now completed EV 
SSL certification. Nearly 90 percent of them are certified by Verisign, 
said Callan, a director of product marketing with the company's SSL group./

Since the majority of the issued EV certs come from Verisign I think the 
correct approach to EV is indeed via their own plugin. Anybody 
interested can install the plugin which isn't something which should be 
in the mainstream browser. Also Comodo CA has released a similar plugin 
some time ago called "VerificationEngine" ( 
http://linuxpr.com/releases/8481.html )... But what Mozilla concerns, 
this issue can be looked at as resolved. Instead I suggest to follow the 
proposal of different verification levels which Eddy from StartCom made 
earlier and bug https://bugzilla.mozilla.org/show_bug.cgi?id=380775 
which should "Make general page of certificate viewer easier to 
understand"...

-- 
Regards
 
Signer:      Eddy Nigg, StartCom Ltd.
Jabber:      [EMAIL PROTECTED]
Phone:       +1.213.341.0390
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security

Reply via email to