Different Colors for different Certificate Authorities

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============8421137701251022451==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="47I6POXiwIHkkuo0qH8KHXGL6or9bx1oE"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--47I6POXiwIHkkuo0qH8KHXGL6or9bx1oE
From: Ali Khalfan <[email protected]>
To: [email protected]
Message-ID: <[email protected]>
Subject: Different Colors for different Certificate Authorities
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Regular users are told to lock for the SSL lock to make sure the site is
secure.  In the old days, it was a lot harder to get an SSL certificate
without some sort of rigorous verification (e.g. registration document,
whois repository, proof of actual owner of the entity owning the domain).=


It is a lot easier to get a valid SSL certificate today.  Some
certificate authorities, such as Truecrypt, provide certificates simply
if proof is provided that a domain is owned.  Because Truecrypt mainly
cares about encryption.  Needless to say, a miscreant setting up a
phishing website does own a domain.  So, encryption is provided but not
authenticity.  A regular user will look at the lock, which is green, and
think the site is secure (while it is not).=20

I would think different colors should be on the bar based on the
certificate authority.  If the certificate is signed by an authority
known to perform rigorous verification it should be different from a
certificate signed by an authority verifies by a simple e-mail
verification.=20


Thanks,
Ali


--47I6POXiwIHkkuo0qH8KHXGL6or9bx1oE
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=ULt4
-----END PGP SIGNATURE-----

--47I6POXiwIHkkuo0qH8KHXGL6or9bx1oE--

--===============8421137701251022451==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
wishlist mailing list
[email protected]
https://lists.mozilla.org/listinfo/wishlist

--===============8421137701251022451==--