Re: Some major edits just checked in. - tls errors

> > http://www.w3.org/2006/WSC/drafts/rec/rewrite.html#sec-tlserrors
> >
> > "When the URL corresponding to the transaction at hand does not match 
the
> > certificate presented, and a validated certificate is used, then error
> > signalling of level warning or above (6.4.3 Warning/Caution Messages ,
> > 6.4.4 Danger Messages) MUST be used."
> >
> > This one seems like a low ball to me. The whole point of the TLS 
server
> > authentication is to match the certificate to the URL. Why is the low 
bar
> > on this warning, instead of always danger?

> I think I took this from Serge's material; personally, I'd be as
> happy to use danger right away.

Only you and I seem to care. Willing to make the change? Or should I put 
it in as an issue?

Received on Thursday, 24 April 2008 20:49:59 UTC