Re: Should EV signalling be in place if the user granted an exception?

On 2008-03-06 12:26:40 -0500, Johnathan Nightingale wrote:

> My gut would be that no, that "augmented assurance" UI really
> does presume that the information has been strongly verified,
> which it hasn't been if there's a mismatch.

I agree.

> I also wonder, if you found this in FF3, whether we have bug
> there, because I think we quite deliberately code against that
> possibility. It's hard for me to test though: I do have to add
> the override for www.sourceforge.net, but my attempts to connect
> there all get redirected back to sourceforge.net (with EV
> treatment).  I can't get www.sourceforge.net to show me EV,
> because I can't get www.sourceforge.net to show me anything at
> all.  :) Apologies though, this last part is sort of off-topic
> for the list.

Interestingly, I can't reproduce this any more -- at least today,
what shows the green bar is indeed https://sourceforge.net.  Which
suggests that I might have been confused by the redirects back and
forth.

-- 
Thomas Roessler, W3C  <tlr@w3.org>

Received on Thursday, 6 March 2008 17:45:54 UTC