[cabfpub] Proposed motion to modify EV domain verification section

Rich Smith richard.smith at comodo.com
Thu May 2 19:59:06 UTC 2013


I absolutely consider the methods you quoted far more sufficient than simply looking at WHOIS information.  It is well known that the domain registrars, with a few possible exceptions, do absolutely no vetting of the information contained in WHOIS so just looking at WHOIS for MYFAKEMICROSOFT.COM and seeing Microsoft's name and address in the Registrant details is completely useless as any kind of actual verification of anything except that the actual domain owner knows how to look up a company's address.


As to Jeremy's point about #7, I would be willing to rework the motion to disallow that for EV.





From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Eddy Nigg (StartCom Ltd.)
Sent: Thursday, May 02, 2013 3:22 PM
To: public at cabforum.org
Subject: Re: [cabfpub] Proposed motion to modify EV domain verification section


On 05/02/2013 09:16 PM, From Rich Smith: 

In the interest of simplifying the EV Guidelines and to allow uniformity of processes where possible I propose the following amendment to the EV Guidelines.  I'm looking for two endorsers.

Do you really consider of these to be sufficient for EV?

3. Communicating directly with the Domain Name Registrant using the contact information listed in the WHOIS record’s “registrant”, “technical”, or “administrative” field;
4. Communicating with the Domain’s administrator using an email address created by pre-pending ‘admin’, ‘administrator’, ‘webmaster’, ‘hostmaster’, or ‘postmaster’ in the local part, followed by the at-sign (“@”), followed by the Domain Name, which may be formed by pruning zero or more components from the requested FQDN;
6. Having the Applicant demonstrate practical control over the FQDN by making an agreed-upon change to information found on an online Web page identified by a uniform resource identifier containing the FQDN;




Eddy Nigg, COO/CTO


StartCom Ltd. <http://www.startcom.org> 


startcom at startcom.org


Join the Revolution! <http://blog.startcom.org> 


Follow Me <http://twitter.com/eddy_nigg> 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130502/81f8c102/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6391 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130502/81f8c102/attachment-0003.bin>

More information about the Public mailing list