Tuesday, Tuesday, December 04, 2001, 1:29:24 PM, Darryl Green wrote: > I don't want to generate a huge discussion about the validity of the browser > recognition claims but I do find the 90%+ a little difficult to swallow. I > would however like to know if that's important to you or not.
No, it's really not. > 2) More importantly I would like to discuss the meaning of SSL: > QuickSSL certificates do not verify identity. The fine print on the QuickSSL > certificate acknowledges that this is the case (Organizational Unit not > Validated -- or some such language appears) Sure they do, they verify it to the same standard that DOMAIN REGISTRARS like Tucows do for transfers of domains. If this standard is ok for domain transfers, then it should be ok for SSL Certs. Once the domain has changed hands in a transfer, getting a cert for it would be easy. There is no inherent benefit of the other CA's practices in this regard over Geotrust's. > been speaking with a member of the WebTrust standards making body. He (and > assures me others on the body) are very disturbed by the QuickSSL offering > and (I quote) will work 'quickly and forcefully' to stop it. This will be > accomplished by insertion of minimum verification requirements in the > WebTrust Standard. I bet they are. This presents a serious threat to the "old style" way of doing things, and threatens to turn the entire SSL Cert market on its head. I bet they want to stop it. I say screw 'em. > Their concern (and my concern too) is that the industry has been working to > explain the meaning of web certificates and that little lock in the browser > to the public. They are trying to make it mean more than what the concerns take it to mean, and that is plain BS. > A big portion of that message is that end-user identity is > established. QuickSSL is offering a new type of lock that does not certify > identity. Bullocks. The identity is verified to the same standard required by domain registrars. -- Best regards, William X Walsh <[EMAIL PROTECTED]> -- Webcertificates.info SSL Certificates for resellers from $49ea
