I believe the problem is that right now a lot of people are
expecting or led to expect CAs to do job (b), but they don't do
that.
Some do, some don't. Work is in progress to differentiate between the two in the browser UI.
Gerv _______________________________________________ Mozilla-security mailing list Mozilla-security@mozilla.org http://mail.mozilla.org/listinfo/mozilla-security