[cabfpub] Proposed motion to modify EV domain verification section

[Geoff Keating]

On 02/05/2013, at 12:59 PM, Rich Smith <richard.smith at comodo.com> wrote:

> Eddy,
> I absolutely consider the methods you quoted far more sufficient than simply looking at WHOIS information.  It is well known that the domain registrars, with a few possible exceptions, do absolutely no vetting of the information contained in WHOIS so just looking at WHOIS for MYFAKEMICROSOFT.COM and seeing Microsoft's name and address in the Registrant details is completely useless as any kind of actual verification of anything except that the actual domain owner knows how to look up a company's address.

I believe the point of looking at whois information is that if you already know you're talking to Microsoft, because you've verified that, and the whois information says the domain is owned by Microsoft, then you've verified domain control.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4316 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130502/4f52277e/attachment-0001.p7s>