Re: Should EV signalling be in place if the user granted an exception?

On 6-Mar-08, at 2:39 PM, Close, Tyler J. wrote:

> Thomas Roessler wrote:
>> It turns out that sourceforge.net is now using EV certificates (yes,
>> I noticed the green bar) -- but with a Common Name of
>> sourceforge.net, not www.sourceforge.net.
>
> I am amused that their EV protected home page contains <script> tags  
> that source the script using an http: URL. Consequently, Firefox  
> currently shows their page with a red slash through their pricy lock  
> icon.
>
> https://sourceforge.net/index.php
>
> Should EV indicators be active in the case of mixed content?

I'd say pretty clearly no.

Cheers,

J

---
Johnathan Nightingale
Human Shield
johnath@mozilla.com

Received on Thursday, 6 March 2008 19:50:16 UTC