Gervase Markham wrote:
> Nils Maier wrote:
>> Link-Fingerprints originate from those crc,sfv,md5sums verification 
>> models.
>> Each do only check given data, but do not tamper with it.
>> Maybe you proposed hard-fail, but that's not what I ever had in mind, so
>> it seems we have opposite opinions on this one.
> 
> It could certainly be that we have different goals. My goal is to make 
> 100% certain that the user of a Link Fingerprint link either gets the 
> data the link was designed for, or gets no data at all. That's what 
> makes them a useful security measure.

But what is the common denominator of: SSL certificates, Signed Add-ons, 
your phising protection, other implemented features?  They all let 
people make decisions; not you, not Microsoft and the Mozilla 
Foundation/Corporation.

_______________________________________________
dev-tech-network mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-network

Reply via email to