- From: Thomas Roessler <tlr@w3.org>
- Date: Wed, 27 May 2009 11:07:20 +0200
- To: WSC WG public <public-wsc-wg@w3.org>
This action went back to Anna Zhang's review of wsc-ui: She had noticed that section 5.3 [1] refers to an augmented assurance indicator that doesn't appear otherwise in the spec. While the indicator actually makes another appearance, that's in the security considerations piece [2], and doesn't help to address Anna's point. To address this point, I think the following things need to happen: - add a few words to 6.1.2 (identity signal content) that make it clear that AA-related signaling is subject to what 5.3 says. (In particular, you *can* show site identity information if an EV site mixes in non-EV, but DV, content.) - it's probably worthwhile to indicate the term "AA indicator" in 6.3, TLS indicator, as well. 1. http://www.w3.org/2006/WSC/drafts/rec/rewrite.html#securepage 2. http://www.w3.org/2006/WSC/drafts/rec/rewrite.html#security-considerations-ev-dv Regards, -- Thomas Roessler, W3C <tlr@w3.org>
Received on Wednesday, 27 May 2009 09:07:28 UTC