Am Donnerstag, 29. August 2019 10:59:40 UTC+2 schrieb Nick Lamb: > On Wed, 28 Aug 2019 11:51:37 -0700 (PDT) > Josef Schneider via dev-security-policy > <[email protected]> wrote: > > > Not legally probably and this also depends on the jurisdiction. Since > > an EV cert shows the jurisdiction, a user can draw conclusions from > > that. > > Yes it is true that crimes are illegal. This has not previously stopped > criminals, and I think your certainty that it will now is misplaced. > > What conclusions would you draw from the fact that the jurisdiction is > the United Kingdom of Great Britain and Northern Ireland? Or the US > state of Delaware ?
If I expect to be on the website of my German bank, I would conclude that I am not at the correct website! If they would use just a DV certificate, I wouldn't be able to come to that conclusion easily! - Josef _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

