Eddy Nigg (StartCom Ltd.) wrote, On 2008-04-27 07:08:
> Then there is only one answer for this: *The EV criteria!* Apply the EV
> guidelines according to what it says.

Those criteria are independent of the browser or application that uses them.
There isn't a "Mozilla EV criteria" and a separate "IE EV criteria" and
"Opera EV criteria".

So, it seem to me that, rather than each browser duplicating the effort of
ongoing monitoring all the audits of all the EV CAs, there should be one
centralized place where that monitoring takes place, whose results are
publicly published, perhaps funded by all the browsers.

I would think that would be attractive to Mozilla, as it would give Mozilla
a chance to expend money (which I think they have in abundance) instead of
Frank's man hours (which are perhaps not quite as abundant. :)

> Frank Hecker:
>> As implied in my previous message, I've noticed that currently there can be 
>> delays of several months from the time an EV audit is completed to the 
>> time that the report is actually published and available for us to review.

We'd want a grace period to include that time.
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to