Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.

[Vincent Archer <var () deny-all com>]

On Sat, Feb 12, 2005 at 04:32:26PM -0800, David Schwartz wrote:
> > As a user of a browser I am not a customer of the CA, and it isn't
> > evident why the CA should be under any obligation to me.  They surely
> > are under an obligation to their shareholders and their customers.
>
>       Nonsense. The CA is asking for your trust and can only earn revenue based
> upon the number of people who trust it.

Wrong. The CA gains trust because it manages to get its certificate included
with the default package for major browsers.

It then has to persuade its customers (the server operators) to buy a
certificate. It does not have to persuade any user: trust is already
implied by the bundling.

-- 
Vincent ARCHER
varcher () denyall com

Tel : +33 (0)1 40 07 47 14
Fax : +33 (0)1 40 07 47 27
Deny All - 5, rue Scribe - 75009 Paris - France
www.denyall.com