[cap-talk] Firefox breaks the principle of identifiability

[Mark Miller]

Ian G wrote:
> Firstly, as above, the browser needs to index from the cert,

What cert? If we're talking about a Verisign-like cert, then we've already lost.

In any case, YURLs + Pet Names need no certs.

> Secondly, petnames may "solve" the problem in theory, but are
> not as well as logos.

I have no problem with Pet Logos, so long as they follow the Pet Name logic. 
(CapDesk uses Pet Icons in such a fashion in addition to Pet Names.) In any 
case, could you explain a scenario where Pet Names are insufficient?

> The ergonomics of graphical presentations
> work much better than just words.  Intiutivelly, just looking
> at the research done on the graphical presentations indicates
> that, and there's been no research done on the effect of the
> petnames to my knowledge. 

I think there's been equally little research on Pet Logos. But if you mean the 
logo logic explained at 
http://www.cs.biu.ac.il/~herzbea//Papers/ecommerce/spoofing.htm , then I fail 
to see how it solves the problem.

-- 
Text by me above is hereby placed in the public domain

     Cheers,
     --MarkM