Re: [FORGED] Re: Firefox removes UI for site identity

On Thu, Oct 24, 2019 at 9:54 PM Peter Gutmann via dev-security-policy < dev-security-policy@lists.mozilla.org> wrote: > Paul Walsh via dev-security-policy > writes: > > >we conducted the same research with 85,000 active users over a period of > >12 months > > As I've already pointed out weeks

Re: [FORGED] Re: Firefox removes UI for site identity

Apologies for the massive number of typos. I was angry when I read the response to my thoughtful messages. I tried my best to hold back. I didn’t even have the energy to check what I’d written before hitting send. > On Oct 24, 2019, at 7:37 PM, Paul Walsh wrote: > > >> On Oct 24, 2019, at

Re: [FORGED] Re: Firefox removes UI for site identity

> On Oct 24, 2019, at 6:53 PM, Peter Gutmann wrote: > > Paul Walsh via dev-security-policy > writes: > >> we conducted the same research with 85,000 active users over a period of >> 12 months > > As I've already pointed out weeks ago when you first raised this, your > marketing department

Re: [FORGED] Re: Firefox removes UI for site identity

Paul Walsh via dev-security-policy writes: >we conducted the same research with 85,000 active users over a period of >12 months As I've already pointed out weeks ago when you first raised this, your marketing department conducted a survey of EV marketing effectiveness. If you have a

Re: Firefox removes UI for site identity

> On Oct 24, 2019, at 2:59 PM, Julien Vehent via dev-security-policy > wrote: > > On Thursday, October 24, 2019 at 5:31:59 PM UTC-4, Paul Walsh wrote: >> There is zero data from any company to prove that browser UI for website >> identity can’t work. > >

Re: Firefox removes UI for site identity

On Thu, Oct 24, 2019 at 5:31 PM Paul Walsh wrote: > So, the next time a person says “EV is broken” or “website identity can’t > work” please think about what I just said and imagine actual browser > designers and developers who were/are responsible for that work. They were > never given a chance

Re: Firefox removes UI for site identity

On Thursday, October 24, 2019 at 5:31:59 PM UTC-4, Paul Walsh wrote: > There is zero data from any company to prove that browser UI for website > identity can’t work. https://www.adambarth.com/papers/2007/jackson-simon-tan-barth.pdf "In this paper, we presented a controlled between-subjects

Re: Policy 2.7 Proposal: Forbid Delegation of Email Validation for S/MIME Certificates

On Thu, Oct 24, 2019 at 10:33 AM Buschart, Rufus wrote: > On Tue, Oct 22, 2019 at 4:23 PM Ryan Sleevi > wrote: > > On Tue, Oct 22, 2019 at 6:31 PM Wayne Thayer via dev-security-policy > wrote: > >> Thanks Dimitris and Rufus.

Re: Firefox removes UI for site identity

On Oct 24, 2019, at 12:36 PM, Phillip Hallam-Baker via dev-security-policy wrote: > > Eric, > > I am not going to be gaslighted here. > > Just what was your email supposed to do other than "suppressing dialogue > within this community"? > > I was making no threat, but if I was still working

Re: Firefox removes UI for site identity

Eric, I am not going to be gaslighted here. Just what was your email supposed to do other than "suppressing dialogue within this community"? I was making no threat, but if I was still working for a CA, I would certainly get the impression that you were threatening me. The bullying and

AW: Policy 2.7 Proposal: Forbid Delegation of Email Validation for S/MIME Certificates

On Tue, Oct 22, 2019 at 4:23 PM Ryan Sleevi wrote: > On Tue, Oct 22, 2019 at 6:31 PM Wayne Thayer via dev-security-policy > wrote: >> Thanks Dimitris and Rufus. Would it satisfy your concern if the requirement >> was changed

Re: Firefox removes UI for site identity

Phillip, that was an unprofessional contribution to this list, that could be read as a legal threat, and could contribute to suppressing dialogue within this community. And, given that the employee to which it is clear you are referring is not only a respected community member, but literally a

Re: DNS records and delegation

There's a specific provision in the CAA checking algorithm that allows CAs to not even bother checking CAA records if CA operates the nameservers for the domain. On Monday, 14 October 2019 04:28:19 UTC+2, Clint Wilson wrote: > On Thu, Oct 10, 2019 at 11:32 PM Ryan Sleevi via

Re: Firefox removes UI for site identity

> On Tue, Oct 22, 2019 at 03:35:52PM -0700, Kirk Hall via dev-security-policy > wrote: > > This is a mischaracterisation. The EV UI has not been removed, it has been > moved to a new location. > That's like, when I throw something away, I didn't actually threw it away, I just moved it to a