- From: Jo Rabin <jrabin@mtld.mobi>
- Date: Mon, 08 Sep 2008 19:40:43 +0100
- To: public-bpwg <public-bpwg@w3.org>
WSC Proposal: We propose that you update this criterion, at a minimum, as follows: If the resource is accessed through HTTPS: If the certificate presented does not match the resource's URI, FAIL. If the certificate has expired or is not yet valid, warn. If certificate validation otherwise fails, FAIL. Checker SHOULD consider arbitrary root certificates (including self-signed certificates) as trusted for the purposes of mobileOK testing. ===== Current Text: Note: To allow for self-signature of certificates during testing the signatory of a certificate should not be checked. ... If the response is an HTTPS response: If the certificate is invalid, FAIL If the certificate has expired, warn ===== Proposed replacement text: Note: Arbitrary root certificates (including self-signed certificates) should be regarded as trusted. ... If the response is the result of a request for a URI which has the scheme https: If the certificate presented does not match the requested URI, FAIL. If the certificate has expired or is not yet valid, warn. If certificate validation otherwise fails, FAIL.
Received on Monday, 8 September 2008 18:41:34 UTC