Re: [Extra] Is this a plausible IMAP extension ?

["Robert Mueller" <[e-mail]>]

> They're trying to invent third party validation services to attest that 
> logos A, B, and C can be used by domains X, Y, and Z, and then explain 
> why that will work better than EV certificates.

This seems to be a long term ongoing problem. Associating domains with real world entities so that systems or users can say "example.com is really associated with the company/brand XYZ corp that I know/trust in the real world".

This seems to require some sort of trusted authority/authorities to do the vetting process. On the surface, this doesn't seem a bad idea, but ends up with all sorts of problems. The real world is complex so you can end up with unexpected overlaps - https://stripe.ian.sh/ - which is I presume part of what caused EV certs to fall over.

(OT: is there any actual documentation anywhere on why all the browser makers appeared to move away from EV all at once significantly downplaying the UI?)

Is there any particular plan on how these third party validation services will work and avoid these sort of problems going forward? Is the idea just that they'll maintain a validated map of domain => logo(s), or will it be something more than that?

-- 
Rob Mueller
[e-mail]