Larry Seltzer on Extended Validation
Larry Seltzer of eWeek has these things to say about Extended Validation SSL. In many ways this article is less about the actual Extended Validation SSL Certificates themselves than about the debate surrounding this new certificate type. For example, Larry's opening sentence reads,
"It seems like every time people get together to do something about a security problem, other people get together to whine about it. "
Larry takes a fair and balanced view of the EV SSL initiative from the pragmatic perspective of improving the online world's overall security profile in actionable, practical ways. That has been the viewpoint of the members of the CA/Browser Forum from the beginning. In particular I like the calm, reasonable, non-hysterical tenor of Larry's article. Here's someone who is looking at the actual facts of the situation and analyzing it reasonably. We could use more of that.
As you might imagine, I've been keeping an eye on the press and online dialog about Extended Validation SSL Certificates. I see a great deal of false assumptions about Extended Validation, how it works, and what it does. I hope in the next few weeks to pull out some of the repeated themes and highlight them, along with explanations of what actually happens. I'll seek to take a page from Larry Seltzer's book and focus on fact and sensibility to lead this dialog forward.
