<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
On 05/15/2013 08:47 PM, From Ben Wilson:
<blockquote cite="mid:001201ce5194$569ccf50$03d66df0$@digicert.com"
type="cite">
Domain registration, control, etc., and proper authorization will
still be a part of EV. The issue is more about consistency between
the Baseline Requirements and the EV Guidelines in one small part
of the process. If there is a deficiency that makes anyone think
that an EV certificate would no longer be considered "extended,"
then they should point that out, explain why, and then it should
be discussed. In other words, what are the processes currently in
use to perform the basic first steps of domain validation for DV,
OV, and EV?</blockquote>
<br>
Basically DV is what the BR requires at the minimum, OV is an
identity or organization validation according to the BR + DV, EV is
the organization validation and domain control/use validation
specific to EV (as it requires today an interaction with the WHOIS
by a CA employee).<br>
<br>
<blockquote cite="mid:001201ce5194$569ccf50$03d66df0$@digicert.com"
type="cite"> There is no doubt that EV has additional steps over
DV and OV, but the latter should be a clear subset of the former.
<br>
</blockquote>
<br>
I'd agree with that, but then we probably should require any of the
BR domain control validation procedures PLUS the human interaction
with the WHOIS. That would make it really a subset plus extended.<br>
<br>
But of course we are discussing this right now - in my opinion it's
the browser vendors mostly that have to weigh in on this as I recall
this particular issue was clearly discussed in the past (IIRC
specially at Mozilla). If there is no objection from them, we can
continue considering the implications of such a change.<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>