* Eddy Nigg:

> The CAs should prevent issuance of certificates which are suspected to 
> be used for phishing attempts and other fraud. This includes cases like 
> real domain names (mic0s0ft.com, paypa1.com) and sub domain names 
> (paypal.nelson.com).

Is there any CA which is part of the browser PKI which actually does
this?

For instance, the site <https://secure.eurosoftmarket.com/> is clearly
fraudulent, but it's received a certificate from Equifax.  I'm sure
there are similar examples for all major CAs.
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to