To my knowledge, a common browser UI has not been discussed in the CAB Forum before (although as I recall, it was always expected that a new EV UI would be created by browsers during the years we were drafting the EV Guidelines in the Forum).
I would point out that the array of browser UIs today is so mixed up that no user can really understand what the UIs mean – see link. https://casecurity.org/browser-ui-security-indicators/ Plus, these indicators are constantly changing with no apparent guiding theory, so even if you understand the UIs today, you will probably not understand them tomorrow. And there has been no real user education for years. For these reasons, a common UI across browsers (and some stability in design) would be very welcome. From: [email protected] [mailto:[email protected]] Sent: Monday, July 17, 2017 4:04 PM To: Kirk Hall <[email protected]>; CA/Browser Forum Public Discussion List <[email protected]> Cc: Mike Reilly (WDG) <[email protected]>; Nate Santiago <[email protected]> Subject: [EXTERNAL]Re: [cabfpub] CABForum Teleconference Proposed Topic: Common Browser UI Security Indicators To clarify, I was requesting to discuss if common browser UI should be discussed at the CAB Forum and if it had been discussed in the past what was the outcome of those discussions. Currently we are not looking to participate in a browser UI working group. Cheers, Curt On Jul 13, 2017, at 11:51 AM, Kirk Hall via Public <[email protected]<mailto:[email protected]>> wrote: Sounds good. Our next teleconference is a week from today, and I’ll schedule a block of time. From: Public [mailto:[email protected]] On Behalf Of Mike Reilly (WDG) via Public Sent: Thursday, July 13, 2017 11:16 AM To: CA/Browser Forum Public Discussion List <[email protected]<mailto:[email protected]>> Cc: Nate Santiago <[email protected]<mailto:[email protected]>> Subject: [EXTERNAL][cabfpub] CABForum Teleconference Proposed Topic: Common Browser UI Security Indicators Hi Kirk. Curt Spann (Apple) and I would like some time on the next CABF teleconference to talk about coordinating browser UI security indicators for TLS/SSL certs. We have an interest in this area, and would like feedback from other browsers and CAs on the following: 1. Should browsers work toward a common browser UI security indicators related to certificates? 2. With the move to 100% encryption, what indicator should DV, OV, and EV sites receive? 3. Should we set up a new Browser UI Working Group within the Forum under the new governance structure to work on this topic? Can we block out some time on the next call for this topic? Thanks, Mike Mike Reilly | Principal PM Lead, Risk Management & Crypto Ecosystem Windows and Devices Group (WDG) InfoSec _______________________________________________ Public mailing list [email protected]<mailto:[email protected]> https://cabforum.org/mailman/listinfo/public
_______________________________________________ Public mailing list [email protected] https://cabforum.org/mailman/listinfo/public
