[cabfpub] [cabfquest] Proposed motion to modify EV domain verification section

[Eddy Nigg (StartCom Ltd.)]

On 05/03/2013 04:47 PM, From Bruce Morton:
> I think for OV and EV, the domain validation includes contact with the organization to confirm authorization.

You can't confirm if somebody controls a domain by contacting the 
applicant - probably you meant for domains that are not directly owned 
by the applicant you'd have to contact the domain owner...

...Which in my opinion should be prohibited in any case. I believe that 
the certificate subject should identify the entity that runs and stands 
behind the site and not some possible third party that provides some 
hosting or other service.


Regards
Signer: 	Eddy Nigg, COO/CTO
	StartCom Ltd. <http://www.startcom.org>
XMPP: 	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: 	Join the Revolution! <http://blog.startcom.org>
Twitter: 	Follow Me <http://twitter.com/eddy_nigg>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130503/7ea13168/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4540 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cabforum.org/pipermail/public/attachments/20130503/7ea13168/attachment-0001.p7s>