Re: [Bimi] Today's BoF

["John Levine" <[e-mail]>]

In article <DD71F5FAA85F312FDB5EF7E4@PSB> you write:
>...  So someone comes
>along, someone who is clearly not BigCo, and obtains BigCo.evil
>(remember, all they need is ability to pay and an email
>address).   They have little trouble obtaining certificates in
>that name because, as far as the DNS environment is concerned,
>they legitimately hold it.

Nobody is assuming that you can get a bimi cert (or whatever) merely
with a domain name similar to the target trademark.  I gather that one
of the gorillas accidentally made this mistake in their informal logo
collection system and a motivation for bimi is to keep it from
happening again.

Of course this returns us to the major question of whether it's
possible to invent an effective system to check bimi applications.  I
could invent one that involved a staff of trademark lawyers, but I
don't think anyone outside the S&P 500 would find that usable.

R's,
John