Florian Weimer wrote: > Section 18 does not require that the domain holder is aware of the > application.
Section 18 requires that the domain holder _be_ the applicant. "To verify Applicant's registration, or exclusive control, of the domain name(s) to be listed in the EV certificate, the CA MUST ..." So the person who is the Applicant must either be the registrant of, or have exclusive control of, the domain name. I can't see how you can read it any other way. > loophole, though; my point is that it's possible to game the EV > process so that parties nominally not able to get EV certificates can > get them.) Again, how? > But is it really true that Mozilla Corporation has exclusive control > over the mozilla.org domain, as implied by the addons.mozilla.org EV > certificate? The web sites indicates that it (the site) belongs to > the Mozilla Foundation, and that mozilla.com is Mozilla Corporation's > domain. The Mozilla Corporation is a wholly-owned subsidiary of the Mozilla Foundation. Gerv _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
