IETF Logo Mail Archive

Re: [dane] Behavior in the face of no answer?

Yoav Nir <ynir@checkpoint.com> Fri, 04 May 2012 20:40 UTC

Return-Path: <ynir@checkpoint.com>
X-Original-To: dane@ietfa.amsl.com
Delivered-To: dane@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB55821F8464 for <dane@ietfa.amsl.com>; Fri, 4 May 2012 13:40:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.346
X-Spam-Level:
X-Spam-Status: No, score=-10.346 tagged_above=-999 required=5 tests=[AWL=0.253, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rckNcCz6Eg2D for <dane@ietfa.amsl.com>; Fri, 4 May 2012 13:40:58 -0700 (PDT)
Received: from michael.checkpoint.com (smtp.checkpoint.com [194.29.34.68]) by ietfa.amsl.com (Postfix) with ESMTP id 8F27421F85D0 for <dane@ietf.org>; Fri, 4 May 2012 13:40:57 -0700 (PDT)
Received: from il-ex01.ad.checkpoint.com (il-ex01.ad.checkpoint.com [194.29.34.26]) by michael.checkpoint.com (8.13.8/8.13.8) with ESMTP id q44KesFB025890; Fri, 4 May 2012 23:40:54 +0300
X-CheckPoint: {4FA44C92-0-1B221DC2-2FFFF}
Received: from il-ex03.ad.checkpoint.com (194.29.34.71) by il-ex01.ad.checkpoint.com (194.29.34.26) with Microsoft SMTP Server (TLS) id 8.3.213.0; Fri, 4 May 2012 23:40:54 +0300
Received: from il-ex01.ad.checkpoint.com ([126.0.0.2]) by il-ex03.ad.checkpoint.com ([194.29.34.71]) with mapi; Fri, 4 May 2012 23:40:52 +0300
From: Yoav Nir <ynir@checkpoint.com>
To: Eric Rescorla <ekr@rtfm.com>
Date: Fri, 4 May 2012 23:40:56 +0300
Thread-Topic: [dane] Behavior in the face of no answer?
Thread-Index: Ac0qNjIdkbPgRswGTAySxIRgt0qMUg==
Message-ID: <EF29AA03-5557-4100-ADC9-2CD53748BFB3@checkpoint.com>
References: <CABcZeBP2iRLa76rSXu4A0OwFxP=tqK1ShZ6wv=6wnaEC6uad+w@mail.gmail.com> <201205041902.q44J2B3F018135@fs4113.wdf.sap.corp> <CABcZeBMBNguyuhJ=ju=tEe23nbVK3T3RW1YUogBinyVuWAX9jg@mail.gmail.com>
In-Reply-To: <CABcZeBMBNguyuhJ=ju=tEe23nbVK3T3RW1YUogBinyVuWAX9jg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
x-kse-antivirus-interceptor-info: scan successful
x-kse-antivirus-info: Clean
x-cpdlp: 1167c1a607a90c806a8fd7d893b4307a2add4847ab
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-KSE-AntiSpam-Interceptor-Info: protection disabled
X-KSE-Antivirus-Interceptor-Info: scan successful
X-KSE-Antivirus-Info: Clean
Cc: "dane@ietf.org" <dane@ietf.org>
Subject: Re: [dane] Behavior in the face of no answer?
X-BeenThere: dane@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS-based Authentication of Named Entities <dane.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dane>, <mailto:dane-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dane>
List-Post: <mailto:dane@ietf.org>
List-Help: <mailto:dane-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dane>, <mailto:dane-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 May 2012 20:40:58 -0000

On May 4, 2012, at 10:05 PM, Eric Rescorla wrote:

> On Fri, May 4, 2012 at 12:02 PM, Martin Rex <mrex@sap.com> wrote:
>> Web Browsers provide visual cues to differentiate DV/EV-certs (since
>> very few users look at the certificate details.
> 
> There's very little evidence that users treat these indicia differently.
> Adding yet another indicator seems to make the cognitive overload
> problem even worse.

An informal, non-scientific survey of some of my coworkers revealed that about half hadn't noticed green indicators, some had, but had no idea what these were, and a few noticed that the company name was indicated. None knew that the CA was actually vouching for the company name being correct. These are people who work at a security vendor. I think you'd do worse in the general population.

Yoav

v2.8.7 | Report a Bug | By Email