Re: EV issues with redirects...

2008-07-06 Thread Nelson Bolyard
Several thoughts about the paypal spoof site that uses a redirector from the real paypal site. 1. I didn't ever see any EV or even non-EV SSL UI chrome indicators at the same time as the spoof site was displayed, so I don't see this as a failure of UI for SSL or EV. But I was using FF3 with a ver

Re: GlobalSign requests (replacement root, EV)

2008-07-06 Thread Frank Hecker
Eddy Nigg wrote: > Both bugs from above have status information incomplete and the entry at > the pending page is also marked as incomplete (Red). Is this intentional > and can/should I wait for any additional review? Sorry, that was an oversight on my part. I've updated the bug status informat

Re: EV issues with redirects...

2008-07-06 Thread Florian Weimer
* Kyle Hamilton: > This is a valid PayPal URL that issues a redirect to an external site, > which just happens (at this moment) to spoof the PayPal layout. > > Is there any provision anywhere for a "you are leaving an EV site to > go to a non-EV SSL site or an unencrypted site" kind of warning? T