[cabfpub] a different UI for OV RE: OIDs for DV and OV

[Richard Wang]

Eddy bring out another problem for OV that we don’t have a uniform standard for OV, this is the problem.

DV only for domain name ownership validation that it is very easy to do, no need to have a standard, and EV we have the standard, only OV vetting is using the different policies for each CA.

 

So maybe CAB Forum need to come out a OV standard, then the browsers can make sure this cert is really standard OV, then they can give it a proper UI. 

 

 

Best Regards,

 

Richard

 

From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Eddy Nigg
Sent: Thursday, November 6, 2014 7:33 AM
To: public at cabforum.org
Subject: Re: [cabfpub] downgrade DV UI RE: OIDs for DV and OV

 

 

On 11/05/2014 04:48 PM, Jeremy Rowley wrote:

That wasn't the point of creating EV. From the beginning, EV was intended to reach only the largest companies on the internet.  It was designed at the request of Microsoft and banks to be a premiere indicator of identity.  EV was never intended to impact OV issuance.  


Maybe we should acknowledge here that CAs working in the field of verification according to different criterion/policies/capabilities have a completely different view of the things than say browser vendors (not speaking about users thereof). It's natural that CAs see it differently since this is their main product, for browsers SSL is just a small (though important) aspect of their product.

I believe it wouldn't hurt to provide a more advanced UI for the more knowledgeable users without confusing the casual user who doesn't care/know what it's for anyway. This could be probably done with the UI that is one click away, whereas the regular UI (address bar) wouldn't change.

But that's just food for thought...

-- 


Regards 


 


Signer: 

Eddy Nigg, COO/CTO


 

StartCom Ltd. <http://www.startcom.org> 


XMPP: 

startcom at startcom.org <xmpp:startcom at startcom.org> 


Blog: 

Join the Revolution! <http://blog.startcom.org> 


Twitter: 

Follow Me <http://twitter.com/eddy_nigg> 


 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20141106/bf8cb7ce/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5075 bytes
Desc: not available
URL: <http://lists.cabforum.org/pipermail/public/attachments/20141106/bf8cb7ce/attachment.p7s>