- From: Johnathan Nightingale <johnath@mozilla.com>
- Date: Thu, 6 Mar 2008 14:49:54 -0500
- To: "Close, Tyler J." <tyler.close@hp.com>
- Cc: Thomas Roessler <tlr@w3.org>, WSC WG <public-wsc-wg@w3.org>
On 6-Mar-08, at 2:39 PM, Close, Tyler J. wrote: > Thomas Roessler wrote: >> It turns out that sourceforge.net is now using EV certificates (yes, >> I noticed the green bar) -- but with a Common Name of >> sourceforge.net, not www.sourceforge.net. > > I am amused that their EV protected home page contains <script> tags > that source the script using an http: URL. Consequently, Firefox > currently shows their page with a red slash through their pricy lock > icon. > > https://sourceforge.net/index.php > > Should EV indicators be active in the case of mixed content? I'd say pretty clearly no. Cheers, J --- Johnathan Nightingale Human Shield johnath@mozilla.com
Received on Thursday, 6 March 2008 19:50:16 UTC