Comments on: Being Green, easiness of http://blog.johnath.com/2008/01/23/being-green-easiness-of/ johnath in blog form Fri, 13 Aug 2010 17:23:32 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Gary Krall http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-132667 Gary Krall Thu, 14 Feb 2008 03:25:19 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-132667 Hi Jonathan: Recall I am the technical director for the team that developed the EV Green Bar extension for FF2 here at VeriSign (https://addons.mozilla.org/en-US/firefox/addon/4828). I was doing some testing this evening with FF3.0b3 and I could not get it to display in the manner your have a screenshot above using the same reference site. Is there some option I need to enable? I can see that the root is there but it is not displaying the green in the address bar. Also I have another question I'd like to ask offline if you could reach out to me. Thanks! Hi Jonathan: Recall I am the technical director for the team that developed the EV Green Bar extension for FF2 here at VeriSign (https://addons.mozilla.org/en-US/firefox/addon/4828). I was doing some testing this evening with FF3.0b3 and I could not get it to display in the manner your have a screenshot above using the same reference site. Is there some option I need to enable? I can see that the root is there but it is not displaying the green in the address bar.

Also I have another question I’d like to ask offline if you could reach out to me.

Thanks!

]]> By: jmdesp http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-129366 jmdesp Thu, 07 Feb 2008 09:04:46 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-129366 I think those decisions deserve to be discussed more widely where adequate, that is either news://mozilla.dev.security or news://mozilla.dev.tech.crypto. Especially since as already noted, they don't really go in the direction that was hinted before. I support Marc Hoffman's opinion, it will be a huge difference in user experience whether the site is EV or not, commerce site will have no choice but to update. I'm not saying this is bad, just that it fells like more debate and more exposure of the rationals would be good. I think those decisions deserve to be discussed more widely where adequate, that is either news://mozilla.dev.security or news://mozilla.dev.tech.crypto.

Especially since as already noted, they don’t really go in the direction that was hinted before.
I support Marc Hoffman’s opinion, it will be a huge difference in user experience whether the site is EV or not, commerce site will have no choice but to update.
I’m not saying this is bad, just that it fells like more debate and more exposure of the rationals would be good.

]]> By: marc hoffman http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-126784 marc hoffman Sat, 02 Feb 2008 12:13:04 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-126784 "However, don’t penalize secure sites which haven’t bought into Verisign’s racket. " i could not agree more. i just tested* our secure shop site (standard Thawte SSL) and Larry tells me "unverified". Ouch - for John Q. that's not much different from "untrusted" or "these guys might not be legit". (*Yesterday's nightly) “However, don’t penalize secure sites which haven’t bought into Verisign’s racket. ”

i could not agree more. i just tested* our secure shop site (standard Thawte SSL) and Larry tells me “unverified”. Ouch – for John Q. that’s not much different from “untrusted” or “these guys might not be legit”.

(*Yesterday’s nightly)

]]> By: Anonymous http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-123857 Anonymous Sun, 27 Jan 2008 08:54:51 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-123857 Site identity button: Nice! Larry: Nice! Extended Validation racket: Ouch! "Green means go", in direct contradiction of previous discussion: Ouch! I personally see no added value in Verisign's EV certificates over a standard SSL certificate, and I see no value in those other than validating that the other end of the connection corresponds to the URL the user provided (which does *not* mean the same thing as "where they wanted to go"). Firefox should do everything possible to make sure that the user knows what site they visited. This includes helping them distinguish chrome from site content, showing the site identity prominently, flagging phishing sites, and other such features. However, don't penalize secure sites which haven't bought into Verisign's racket. Site identity button: Nice!
Larry: Nice!
Extended Validation racket: Ouch!
“Green means go”, in direct contradiction of previous discussion: Ouch!

I personally see no added value in Verisign’s EV certificates over a standard SSL certificate, and I see no value in those other than validating that the other end of the connection corresponds to the URL the user provided (which does *not* mean the same thing as “where they wanted to go”).

Firefox should do everything possible to make sure that the user knows what site they visited. This includes helping them distinguish chrome from site content, showing the site identity prominently, flagging phishing sites, and other such features. However, don’t penalize secure sites which haven’t bought into Verisign’s racket.

]]> By: Andrew Codrington http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-123286 Andrew Codrington Fri, 25 Jan 2008 17:18:00 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-123286 Hi Johnathan, [Tone: Non-confrontational, "what did I/we miss?"] Apologies if I haven't been following closely enough, but what's the rationale behind only turning on VeriSign roots for this testing phase? I'm sure you can imagine that it causes me and others great sadness. Best regards, Andrew PS: This makes it sound like inclusion is based on NSS asking for a root to be included temporarily: http://groups.google.com/group/mozilla.dev.tech.crypto/browse_thread/thread/220d1e49e7c4479c/d24ea1658b6a942f This makes it seem like we're (Entrust) in good stead for inclusion, even in this temporary testing phase: https://bugzilla.mozilla.org/show_bug.cgi?id=382352 Do we just need to send someone in the NSS group cookies? Hi Johnathan,
[Tone: Non-confrontational, "what did I/we miss?"]
Apologies if I haven’t been following closely enough, but what’s the rationale behind only turning on VeriSign roots for this testing phase? I’m sure you can imagine that it causes me and others great sadness.
Best regards,
Andrew

PS:
This makes it sound like inclusion is based on NSS asking for a root to be included temporarily:
http://groups.google.com/group/mozilla.dev.tech.crypto/browse_thread/thread/220d1e49e7c4479c/d24ea1658b6a942f

This makes it seem like we’re (Entrust) in good stead for inclusion, even in this temporary testing phase:
https://bugzilla.mozilla.org/show_bug.cgi?id=382352

Do we just need to send someone in the NSS group cookies?

]]> By: kwerboom http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-123124 kwerboom Fri, 25 Jan 2008 08:09:43 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-123124 @Travis I have only FF3B2, but I believe that you have to left click on the green area to bring Larry up and left click on the green area again to make Larry go away. @Travis

I have only FF3B2, but I believe that you have to left click on the green area to bring Larry up and left click on the green area again to make Larry go away.

]]> By: Travis http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-122976 Travis Fri, 25 Jan 2008 00:54:06 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-122976 I haven't tried anything past FF2, so maybe this is dumb. In the screenshot, there is a big popup with Larry-the-passport-reader and no apparent way to make it go away. What is the actual behavior? If this thing pops up automatically, shouldn't it have an X button or something to make it obvious how to get it out of your way? Or do you only get that from a right click like a context menu or something, so it goes away whenever you take focus away? I haven’t tried anything past FF2, so maybe this is dumb. In the screenshot, there is a big popup with Larry-the-passport-reader and no apparent way to make it go away. What is the actual behavior? If this thing pops up automatically, shouldn’t it have an X button or something to make it obvious how to get it out of your way? Or do you only get that from a right click like a context menu or something, so it goes away whenever you take focus away?

]]> By: Brian http://blog.johnath.com/2008/01/23/being-green-easiness-of/comment-page-1/#comment-122542 Brian Wed, 23 Jan 2008 18:14:14 +0000 http://blog.johnath.com/index.php/2008/01/23/being-green-easiness-of/#comment-122542 From your earlier posts regarding EV certs, you seems to be against the "green means go" design. What made you change your mind? From your earlier posts regarding EV certs, you seems to be against the “green means go” design. What made you change your mind?

]]>