On Wed, Feb 24, 2016 at 9:31 AM, Gervase Markham <g...@mozilla.org> wrote:
> On 24/02/16 02:26, Eric Mill wrote: > > It would also be worth learning what segment of the market these 10,000 > > terminals would affect. I've seen these terminals before: > > > > > https://www.google.com/search?q=worldpay&espv=2&biw=1168&bih=783&site=webhp&source=lnms&tbm=isch&sa=X&ved=0ahUKEwj91arSqo_LAhUBOSYKHZ4_AtYQ_AUICCgD#tbm=isch&q=worldpay+terminal > > > > Many of them are used by small businesses and sole proprietors. Many of > > them are used by large businesses. Which kind of customer is being > affected > > should factor into Mozilla's decision. > > I don't agree: > > "Do not pervert justice; do not show partiality to the poor or > favouritism to the great, but judge your neighbour fairly." -- Leviticus > 19:15 > Clearly, Mozilla is making a value judgment that this SHA-1 exception is more merited than other public and private requests for exceptions. It doesn't sound like Mozilla is potentially supporting this exception based on a calculation of economic impact, but rather an assessment of its potential to affect human consumers and business owners. In either case, I'm not suggesting devaluing rich people - I'm saying that large businesses have a greater capacity to absorb disruption and ephemeral economic loss than small businesses and sole proprietors, and that's what Mozilla should take into account. -- Eric -- konklone.com | @konklone <https://twitter.com/konklone> _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
