[cabfpub] Domain validation

Anoosh Saboori ansaboor at microsoft.com
Wed May 6 22:37:49 UTC 2015

Reviving this older thread. It seems that both:

1.       Forum has concerns around relying only on whois database or email address since the whois database might not be accurate

2.       MS still has concerns for #6 not being at par with the rest of validation mechanism proposed

So, can we get to a point where both concerns are addressed by modifying the requirement as: "#6 continues to be accepted, only if other validation methods failed to work. CAs then keep documentation on why they decided to accept #6. "


From: public-bounces at cabforum.org [mailto:public-bounces at cabforum.org] On Behalf Of Eddy Nigg
Sent: Friday, April 17, 2015 2:03 PM
To: public at cabforum.org
Subject: Re: [cabfpub] Domain validation

On 04/16/2015 07:36 PM, Jeremy Rowley wrote:
This is an awfully subjective argument.

Per the last WHOIS accuracy report from ICANN, email is accurate 90% of the time.

Can you explain how an email can not be accurate in respect to the domain control validations? If an email doesn't exist that's obviously another matter which has no impact.


Eddy Nigg, COO/CTO

StartCom Ltd.<http://www.startcom.org>


startcom at startcom.org<xmpp:startcom at startcom.org>


Join the Revolution!<http://blog.startcom.org>


Follow Me<http://twitter.com/eddy_nigg>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20150506/a70624b7/attachment-0002.html>

More information about the Public mailing list