lock proxy configuration

2007-02-01 Thread jerome . kaluza
Hello all, I am looking for a way to forbid to users to change the proxy server in firefox config options, but i don't know exactly how to do this, by extentions or should i have to modify the source code of firefox (1.5). or is there file to set protection on it in the filesystem? thank you

Re: lock proxy configuration

2007-02-01 Thread Gervase Markham
[EMAIL PROTECTED] wrote: Hello all, I am looking for a way to forbid to users to change the proxy server in firefox config options, but i don't know exactly how to do this, by extentions or should i have to modify the source code of firefox (1.5). You can do it using pref locking, assuming the

Re: Study questions EV certs effectiveness?

2007-02-01 Thread Eddy Nigg (StartCom Ltd.)
Hi Mike, beltzner wrote: Being able to talk about validated identity is indeed quite interesting, but advertising get the green bar[1], go green[2] or telling users that they are safe when they see a green URL bar all cause concern in my mind. I'm glad to hear that! In a previous thread I made

Re: lock proxy configuration

2007-02-01 Thread Jan Steffen
Gervase Markham schrieb: [EMAIL PROTECTED] wrote: Hello all, I am looking for a way to forbid to users to change the proxy server in firefox config options, but i don't know exactly how to do this, by extentions or should i have to modify the source code of firefox (1.5). You can do it

Re: Study questions EV certs effectiveness?

2007-02-01 Thread Eddy Nigg (StartCom Ltd.)
Hi Boris, Boris Zbarsky wrote: Mousing over the padlock currently shows a tooltip that says Authenticated by where is the O field of the certificate issuer. I agree that we could show better stuff here. The question is what to show. Right! I think the Authenticated by is not the

Re: Study questions EV certs effectiveness?

2007-02-01 Thread beltzner
On 2/1/07, Eddy Nigg (StartCom Ltd.) [EMAIL PROTECTED] wrote: Could you pop in a line at dev-security, once a discussion has started in one of the relevant mailing lists, so we could join that effort as well? Thanks! Certainly. I promises, double cross my heart and hope to die. cheers, mike

Re: Flowchart covering SSL checks, error states, dialogs

2007-02-01 Thread beltzner
On 2/1/07, Gervase Markham [EMAIL PROTECTED] wrote: Not to my knowledge. Such a thing would be fantastic! What I was able to offer the W3C was: http://www.w3.org/2006/WSC/wiki/NoteMozillaCertificateValidationErrors But if someone could help me construct the workflow, that would be great. Any

Re: EV guidelines

2007-02-01 Thread Heikki Toivonen
Ben Bucksch wrote: People have said that not every US citizen has a passport. But they can get one. This is about ensuring something to users, after all. Actually, several million US citizens can not get a passport. I can't find the actual article I read, but I saw it linked from reddit or digg

Re: EV guidelines

2007-02-01 Thread Ben Bucksch
Heikki Toivonen wrote: Actually, several million US citizens can not get a passport. I can't find the actual article I read, but I saw it linked from reddit or digg or some such in the last week or so. However, one example I found was if you are more than $5000 behind in child support payments:

Re: Study questions EV certs effectiveness?

2007-02-01 Thread Eddy Nigg (StartCom Ltd.)
Gervase Markham wrote: But (and I feel like a broken record) Me too ;-) we should only display this information if there's some chance it'll be correct. No, a decent browser should provide the information of the certificate in an easy way! Withholding valuable information isn't perhaps the