Re: [FORGED] Re: Firefox removes UI for site identity

2019-10-25 Thread Phillip Hallam-Baker via dev-security-policy
On Fri, Oct 25, 2019 at 4:21 AM James Burton wrote: > Extended validation was introduced at a time when mostly everyone browsed > the internet using low/medium resolution large screen devices that provided > the room for an extended validation style visual security indicator . > Everything has mo

Re: [FORGED] Re: Firefox removes UI for site identity

2019-10-25 Thread James Burton via dev-security-policy
Extended validation was introduced at a time when mostly everyone browsed the internet using low/medium resolution large screen devices that provided the room for an extended validation style visual security indicator . Everything has moved on and purchases are made on small screen devices that has

Re: [FORGED] Re: Firefox removes UI for site identity

2019-10-24 Thread Phillip Hallam-Baker via dev-security-policy
On Thu, Oct 24, 2019 at 9:54 PM Peter Gutmann via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Paul Walsh via dev-security-policy > writes: > > >we conducted the same research with 85,000 active users over a period of > >12 months > > As I've already pointed out weeks ago

Re: [FORGED] Re: Firefox removes UI for site identity

2019-10-24 Thread Paul Walsh via dev-security-policy
Apologies for the massive number of typos. I was angry when I read the response to my thoughtful messages. I tried my best to hold back. I didn’t even have the energy to check what I’d written before hitting send. > On Oct 24, 2019, at 7:37 PM, Paul Walsh wrote: > > >> On Oct 24, 2019, at

Re: [FORGED] Re: Firefox removes UI for site identity

2019-10-24 Thread Paul Walsh via dev-security-policy
> On Oct 24, 2019, at 6:53 PM, Peter Gutmann wrote: > > Paul Walsh via dev-security-policy > writes: > >> we conducted the same research with 85,000 active users over a period of >> 12 months > > As I've already pointed out weeks ago when you first raised this, your > marketing department c

Re: [FORGED] Re: Firefox removes UI for site identity

2019-10-24 Thread Peter Gutmann via dev-security-policy
Paul Walsh via dev-security-policy writes: >we conducted the same research with 85,000 active users over a period of >12 months As I've already pointed out weeks ago when you first raised this, your marketing department conducted a survey of EV marketing effectiveness. If you have a refereed,

Re: Firefox removes UI for site identity

2019-10-24 Thread Paul Walsh via dev-security-policy
> On Oct 24, 2019, at 2:59 PM, Julien Vehent via dev-security-policy > wrote: > > On Thursday, October 24, 2019 at 5:31:59 PM UTC-4, Paul Walsh wrote: >> There is zero data from any company to prove that browser UI for website >> identity can’t work. > > https://www.adambarth.com/papers/2007/

Re: Firefox removes UI for site identity

2019-10-24 Thread Phillip Hallam-Baker via dev-security-policy
On Thu, Oct 24, 2019 at 5:31 PM Paul Walsh wrote: > So, the next time a person says “EV is broken” or “website identity can’t > work” please think about what I just said and imagine actual browser > designers and developers who were/are responsible for that work. They were > never given a chance

Re: Firefox removes UI for site identity

2019-10-24 Thread Julien Vehent via dev-security-policy
On Thursday, October 24, 2019 at 5:31:59 PM UTC-4, Paul Walsh wrote: > There is zero data from any company to prove that browser UI for website > identity can’t work. https://www.adambarth.com/papers/2007/jackson-simon-tan-barth.pdf "In this paper, we presented a controlled between-subjects eval

Re: Firefox removes UI for site identity

2019-10-24 Thread Paul Walsh via dev-security-policy
On Oct 24, 2019, at 12:36 PM, Phillip Hallam-Baker via dev-security-policy wrote: > > Eric, > > I am not going to be gaslighted here. > > Just what was your email supposed to do other than "suppressing dialogue > within this community"? > > I was making no threat, but if I was still working f

Re: Firefox removes UI for site identity

2019-10-24 Thread Phillip Hallam-Baker via dev-security-policy
Eric, I am not going to be gaslighted here. Just what was your email supposed to do other than "suppressing dialogue within this community"? I was making no threat, but if I was still working for a CA, I would certainly get the impression that you were threatening me. The bullying and unprofess

Re: Firefox removes UI for site identity

2019-10-24 Thread Eric Mill via dev-security-policy
Phillip, that was an unprofessional contribution to this list, that could be read as a legal threat, and could contribute to suppressing dialogue within this community. And, given that the employee to which it is clear you are referring is not only a respected community member, but literally a peer

Re: Firefox removes UI for site identity

2019-10-24 Thread Daniel Marschall via dev-security-policy
> On Tue, Oct 22, 2019 at 03:35:52PM -0700, Kirk Hall via dev-security-policy > wrote: > > This is a mischaracterisation. The EV UI has not been removed, it has been > moved to a new location. > That's like, when I throw something away, I didn't actually threw it away, I just moved it to a ne

Re: Firefox removes UI for site identity

2019-10-23 Thread Paul Walsh via dev-security-policy
On Oct 22, 2019, at 4:49 PM, Matt Palmer via dev-security-policy wrote: > > On Tue, Oct 22, 2019 at 03:35:52PM -0700, Kirk Hall via dev-security-policy > wrote: >> I also have a question for Mozilla on the removal of the EV UI. > > This is a mischaracterisation. The EV UI has not been removed

Re: Firefox removes UI for site identity

2019-10-23 Thread Jakob Bohm via dev-security-policy
On 23/10/2019 01:49, Matt Palmer wrote: On Tue, Oct 22, 2019 at 03:35:52PM -0700, Kirk Hall via dev-security-policy wrote: I also have a question for Mozilla on the removal of the EV UI. This is a mischaracterisation. The EV UI has not been removed, it has been moved to a new location. It

Re: Firefox removes UI for site identity

2019-10-23 Thread Phillip Hallam-Baker via dev-security-policy
On Tue, Oct 22, 2019 at 7:49 PM Matt Palmer via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > On Tue, Oct 22, 2019 at 03:35:52PM -0700, Kirk Hall via > dev-security-policy wrote: > > I also have a question for Mozilla on the removal of the EV UI. > > This is a mischaracteri

Re: Firefox removes UI for site identity

2019-10-22 Thread Wayne Thayer via dev-security-policy
The primary purpose of forwarding the Intent to Ship email to this list was to inform the community of this planned change and the reasoning behind it. Mozilla considered lots of information prior to announcing the change, and during the vigorous debate that ensued, we continued to listen without t

Re: Firefox removes UI for site identity

2019-10-22 Thread Matt Palmer via dev-security-policy
On Tue, Oct 22, 2019 at 03:35:52PM -0700, Kirk Hall via dev-security-policy wrote: > I also have a question for Mozilla on the removal of the EV UI. This is a mischaracterisation. The EV UI has not been removed, it has been moved to a new location. > So my question to Mozilla is, why did Mozill

Re: Firefox removes UI for site identity

2019-10-22 Thread Wayne Thayer via dev-security-policy
On Tue, Oct 22, 2019 at 1:38 PM Paul Walsh via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Thanks Johann. Much appreciated. Would you be kind enough to email me a > screen shot to save me the trouble of installing an older version and then > waiting for an update? :) > >

Re: Firefox removes UI for site identity

2019-10-22 Thread Kirk Hall via dev-security-policy
I also have a question for Mozilla on the removal of the EV UI. This issue started with a posting by Mozilla on August 12, but despite 237 subsequent postings from many members of the Mozilla community, I don't think Mozilla staff ever responded to anything or anyone - not to explain or justify

Re: Firefox removes UI for site identity

2019-10-22 Thread Paul Walsh via dev-security-policy
Thanks Johann. Much appreciated. Would you be kind enough to email me a screen shot to save me the trouble of installing an older version and then waiting for an update? :) Thanks, - Paul > On Oct 22, 2019, at 1:29 PM, Johann Hofmann wrote: > > Hi Paul, > > thanks for the heads up. This was

Re: Firefox removes UI for site identity

2019-10-22 Thread Johann Hofmann via dev-security-policy
Hi Paul, thanks for the heads up. This wasn't intentional and I've reached out to get the security UI changes added to the release notes for 70. You're right that this is significant enough to be included. The page should be updated very soon, so that most users will see the new version (due to th