Re: [FORGED] Fwd: Intent to Ship: Move Extended Validation Information out of the URL bar

2019-08-13 Thread Man Ho via dev-security-policy
For EV certificate being useful in email, email client software should 
give a special EV treatment to such certificate.  I am not aware of any 
email client software that support any special EV treatment at all.  Do 
you have more information to share with us?

-- Man Ho

On 13-Aug-19 5:12 PM, Kurt Roeckx via dev-security-policy wrote:
> But EV is still useful for things like code signing and email. And I 
> would argue that EV should be the only option for such certificates.

___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy


Re: [FORGED] Fwd: Intent to Ship: Move Extended Validation Information out of the URL bar

2019-08-13 Thread Kurt Roeckx via dev-security-policy

On 2019-08-13 05:27, Peter Gutmann wrote:

Wayne Thayer via dev-security-policy  
writes:


Mozilla has announced that we plan to relocate the EV UI in Firefox 70, which
is expected to be released on 22-October. Details below.


Just out of interest, how are the CAs taking this?  If there's no more reason
to pay a substantial premium to enable additional UI bling in browsers, isn't
this going to kill the market for EV certs?


See the original mail for why the indication has been removed in browsers.

But EV is still useful for things like code signing and email. And I 
would argue that EV should be the only option for such certificates.



Kurt
___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy


Re: [FORGED] Fwd: Intent to Ship: Move Extended Validation Information out of the URL bar

2019-08-12 Thread Peter Gutmann via dev-security-policy
Wayne Thayer via dev-security-policy  
writes:

>Mozilla has announced that we plan to relocate the EV UI in Firefox 70, which
>is expected to be released on 22-October. Details below.

Just out of interest, how are the CAs taking this?  If there's no more reason
to pay a substantial premium to enable additional UI bling in browsers, isn't
this going to kill the market for EV certs?

Peter.
___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy