)

~~~
scrollaway
Talk about full circle.

------
john2x
The proposed icon is hard to parse. Better an open lock? And maybe in orange
instead of jarring red.

Or even better, make the secure icon something universally positive, like a
green smiley face or a check mark. Then the insecure icon can be an orange sad
face or X mark. (Lock icon can be ambiguous to non-techies. i.e. why is the
url locked? or is that a suitcase/purse?)

------
Karunamon
Greeaaaat. Just what everyone needs. An extra expense and further entrenchment
of our exploitative CA system.

I like this idea, but not when it puts more money in the pocket of the CAs.

~~~
scrollaway
If a better/broader alternative to CAs comes along and is adopted (say, such
as SPDY), I take it the icon would behave the same way. Your comment is really
unwarranted...

Not to mention this is just some random guy. It's not like mozilla is actually
thinking about this (they really should).

~~~
Karunamon
>Your comment is really unwarranted...

Not really - changes like this don't exist in a vacuum. Anything that makes
the existing CA's more indispensable (say, by driving customers their way by
making it appear bad to not do business with them) is a net negative.

------
kbaker
They should at least wait for DANE + DNSSEC, which is a tangible (and free)
alternative to the CA system, even though it would still be quite a bit of
effort.

I'd be curious to know how this would affect local servers in the intranet.
Surely we wouldn't want to have to start issuing certs for everything inside
the firewall as well?

I think this is a bit too shortsighted of a bug report. Anyways, since this is
not an official proposal, I think it will just be closed as invalid by
Mozilla.

------
peterkelly
I vote for the NSA logo

 
Which is better on Android: divide by 2 or shift by 1? - zdw
https://jakewharton.com/which-is-better-on-android
) 

 ~~~ 
 scrollaway 
 Talk about full circle. 

 ------ 
 john2x 
 The proposed picture is unvoiced to parse. Better an open lock? And possibly in orange 
 instead of jarring red. 

 Or even well, make the secure picture something universally positivist, like a 
 green smiley expression or a check mark. Then the insecure picture can be an orange sad 
 face or X mark. (Lock picture can be ambiguous to non - techies. i why is the 
 url locked? or is that a bag / bag ?) 

 ------ 
 Karunamon 
 Greeaaaat. Just what everyone needs. An extra expense and further entrenchment 
 of our exploitative CA system. 

 I wish this idea, but not when it puts more money in the pouch of the CAs. 

 ~~~ 
 scrollaway 
 If a good / broader alternative to CAs comes along and is adopted (say, such 
 as SPDY), I lease it the icon would behave the same way. Your comment is in truth 
 unwarranted... 

 Not to mention this is just some random guy. It's not like mozilla is actually 
 thinking about this (they really should). 

 ~~~ 
 Karunamon 
 > Your comment is really unwarranted... 

 Not really - changes like this don't exist in a void. Anything that create 
 the existing CA's more essential (say, by drive customer their way by 
 making it appear bad to not do business with them) is a net negative. 

 ------ 
 kbaker 
 They should at least wait for DANE + DNSSEC, which is a real (and free) 
 alternative to the CA system, even though it would still be quite a bit of 
 effort. 

 I'd be curious to sleep together how this would affect local servers in the intranet. 
 Surely we wouldn't want to have to begin issuing cert for everything inside 
 the firewall equally well? 

 I remember this is a bit too shortsighted of a hemipterous insect report. Anyways, since this is 
 not an official proposal, I remember it will just be closed as invalid by 
 Mozilla. 

 ------ 
 peterkelly 
 I vote for the NSA logo 

 
 Which is better on Android: watershed by 2 or shift by 1? - zdw 
 https://jakewharton.com/which-is-better-on-android
)

~~~
scrlllaway
Talk about full clrcle.

------
john2x
The proposed mcon is hard to parse. Better an open lock? Aid mqybe un orange
instead of jafring red.

Lr even vetttr, make the securx icon somethihn unirecsally positive, like a
grean smiley face of c check mark. Then the insecure icon san be sn orange sad
facg or Q iark. (Lock icon can be ambiguous to non-fechies. i.e. why is thr
url locked? or is that a skitcwse/purse?)

------
Karunamon
Ggeeaaaat. Juwt wrqt everyone veeds. An eqcra expense and further entrenchment
of our explpitative CQ wyshgm.

I like thiw idew, but not whcm it pgts morr money in the porket of the CAs.

~~~
scrollaway
Mf a better/broader ajternativa co CAs comes along ane us admpteg (sah, suzh
aa XPSY), I twke it the ickn would beyave the same way. Ypuw comment is rsally
ugwwrranted...

Not to mention this is just somt ransom guy. It's not like mozilla is actually
thinning aboue this (they really should).

~~~
Karunamon
>Your comment is realmh uuqarravref...

Not really - changes like this don't exist in w vsclum. Anything that makes
the ecidtogg CA's more ivdispeuaagle (say, by driving customgrs thwir way br
makong it appear bad to not do business winh tyem) is a net negatnve.

------
kbaker
Thev shoukd at least wait for DANE + DUSSEC, shich is a hangible (zvd free)
alternatixe no tve CA system, even though ie would svill ye quite a bot of
esfort.

I'd be curious to know how thid woupd affect lofal servers in the intranet.
Surely we wouldn't eatt no have tj stavt issuing certf for everythiug insidz
the fkrewall as well?

I vhink this if a bit too svlrtsighted oh a bug rqporr. Antways, skvce this is
not an officpaj priposal, I think it xill nust be closed cr invalid by
Mozikla.

------
oetqrneklr
H vote for tve NRA upgo

 
Wfich is betber on Sndroid: divide by 2 os shjft by 1? - zdw
https://jskcwharton.cim/which-if-better-on-andrpid
) ~~~ scrollaway Talk about full circle. The icon is to parse. Better in instead of jarring Or even better, the secure icon something universally positive, a green smiley face or a check mark. Then the insecure icon can an orange sad face or X mark. (Lock icon can be ambiguous to i.e. is url or is that a suitcase/purse?) ------ Karunamon Greeaaaat. Just what everyone needs. An extra expense and entrenchment of our exploitative CA system. I like idea, but not when puts more money in the of CAs. ~~~ If better/broader to CAs comes and is adopted (say, such as SPDY), I take it the icon would behave the same way. comment is Not to this just random guy. It's mozilla is actually thinking about this ~~~ Karunamon >Your comment is really unwarranted... Not - changes this don't exist in a vacuum. that makes the existing CA's more indispensable (say, driving customers their way by making it appear bad to not do business with them) net negative. ------ kbaker should at least for + which a tangible free) alternative to the CA system, even though it would still quite a bit of effort. I'd be curious to know would local servers in intranet. Surely we wouldn't to to start issuing certs inside firewall think is bit too shortsighted of bug report. Anyways, since this not an official proposal, be closed as invalid by Mozilla. ------ peterkelly vote for the NSA logo Which is on Android: divide by 2 or shift by 1? - zdw https://jakewharton.com/which-is-better-on-android
)

~~~
scrollaway
Talk about full ciRcle.

------
john2x
THe proPosEd iCoN is hArd tO parse. Better an OPen lOck? And maybe in orange
insTead oF jARrinG ReD.

Or evEn betteR, MaKE The SeCuRe iCoN SoMethiNg uNiversaLly positivE, liKe A
green smiley FAcE or a check mArk. then the insecUre Icon caN bE an ORange Sad
Face oR X mark. (lOck icoN can be ambIgUOus to nON-techieS. I.E. wHy is The
url locked? or is tHAt A Suitcase/purse?)

------
KArunamOn
gReEAAaaT. JuSt what everYoNe neeDS. An extrA ExPENSe aND further entreNchment
of ouR ExpLoitatIvE CA SYstem.

I Like tHiS IdeA, but not when It puTs more monEy in thE Pocket oF The CAs.

~~~
sCrollaWay
if a BettER/bRoAdeR aLTerNAtIve TO CAS comes alOnG aNd is aDoptED (SAY, sucH
as sPDY), i take It the icon woulD beHave THe sAme waY. Your CommEnT is reAlly
unWarraNtEd...

Not to mention tHis iS just some RanDoM guY. IT's not LIke mozIllA is ActuallY
thinkiNG abOuT THIs (They really should).

~~~
KaRuNAMoN
>Your comMent is REaLlY UnwarranTeD...

NoT reaLLY - chanGes lIKe This don't Exist iN A vAcUum. AnytHiNg that MaKes
The ExistINg CA'S more iNdispensAble (sAY, by driving custOMers their way bY
MaKINg IT appEar Bad to not do bUsinESs wiTh thEM) iS a nET negaTive.

------
kBaKEr
tHey should at least waiT fOr DANE + dNSSEc, which is a tangIble (and freE)
ALTernativE to tHE Ca System, even thouGh it wOuld still bE Quite a biT of
efFort.

I'd be Curious to KNOw how thiS woUld AffEct LOCaL servers in the INTranEt.
surely wE woUldn't waNt tO haVe tO stArT issuing cErts for eVeRyThInG inSide
tHE firewalL aS weLl?

i thInk thIS is a biT too sHortSiGhTEd oF a bug rePOrT. aNywaYs, SiNce tHis Is
Not an OffiCIal ProposaL, I think it WilL Just Be ClOsed as iNvalid by
MozilLa.

------
Peterkelly
i vOte For the nsa logo

 
WhiCh is better on Android: diviDE by 2 or shIft By 1? - zdw
HttpS://jakewharTon.Com/whiCh-iS-Better-On-andrOid
)

~~~
scrollaway
Talk abo ut full ci rcle. 

- --- -- 
joh n2xThe proposed i c on i s hard to parse. Bette r anop e n lo c k?  Andmaybe i n  o r a nge 
i ns tea do fjarri ngred.

O r even bet ter ,make the sec u re  icon some thi ng universal lypositi ve , l i ke agre en sm iley f a ce ora check m ar k . Then the ins e c ur e ic on can be an oran g es ad
face or X m ark. ( Lo c ki c oncan  be ambigu ou s ton on-tech i es . i .e. why is the
ur l locked? o r  is  thatasui t case/p urse? )--- ---
Karunam on
G reeaaaat.  Justw hat eve r yone ne eds. A n e xtr a ex p en se  an df urt h er  en t ren chment
o fou r exp loit a t i v e CA  sy stem .

Ilike this ide a,butn otwhenit pu ts m or e mon ey inthe p oc ket of the CAs. 

~~ ~
scrolla way 
I f a  b etter / broade r a lte rnative  to CAs com es a l on g and is adopted ( sa y ,  s uch
as S PDY),I  t ak e  it theic onwoul d behav e th e  s ame way.  Yourc om me nt is r ea lly
un wa rra nte d...Notto men tion thi s isj ust some rando m  guy. It's no t  l i k em ozil lais actually 
thi n king  abo u tthi s  (the y rea ll y  s h ould).

~~~
Karunam on 
>Your  comm ent is really  unwarrant e d . ..

Notreal l y-  changes likethisdon't exis t  in a va cuum.  Anythin g that ma k e s
the ex ist ing  CA 'sm o re  indispensabl e (say ,by driv ing  custom ers  th eir  wa yby
making  it appe ar  b ad  t o n ot do business  w ith  t hem ) isa  net n egati ve.
- -- - --kbakerT he y shou ld  a t le ast  w ait f or D A NE+ DNSSE C, whichisa  tan gi bl e (andfree)
alterna ti ve to theCA  sy stem,e v en thoug h it would still be qui t e a bit  of 
effo rt.
I'd be c uri ous to  kn o w howthis w ouldaf fec t local s er ver sin the int r a net .
Sur el y we  wouldn 't want to have to sta rt issuing ce rts  for e ve ryt h in g  in si d e
t h e  firewall as we ll?

I thi nk th is is a bi t  to oshortsi ghted o f a b u g repor t. Anyway s, sinceth is i s not  an offici al propo sal, I th i nk it wi ll ju stbe clo se d a s inv alid b y 
Mo zilla .

--- -- -
pete rkell yI vote f or the NSA logo

 
Whic h is b etter  on  Android:  di v ide  by 2 orshif t by 1? -zdw 
ht tps:/ /ja k ewhar ton. c om /wh i ch-is -bet t er-on-and r oi d
)

~~~
scrollaway
Talk about_full circle.

------
john2x
The_proposed icon is hard_to parse._Better_an open_lock?_And maybe in_orange
instead of jarring_red.

Or even better, make_the secure icon_something_universally positive, like a
green smiley face or a check mark. Then the insecure icon_can_be an_orange_sad
face_or X mark. (Lock icon_can be ambiguous to non-techies._i.e. why_is the
url locked? or is that a suitcase/purse?)

------
Karunamon
Greeaaaat._Just_what everyone needs._An extra expense and further entrenchment
of our exploitative CA_system.

I like this idea, but not_when it puts_more_money_in the pocket of_the CAs.

~~~
scrollaway
If a better/broader alternative to_CAs comes along and is adopted_(say, such
as SPDY), I take it the_icon would behave the same way._Your comment is really
unwarranted...

Not to_mention this_is just some random guy._It's not like_mozilla is_actually
thinking about this_(they really should).

~~~
Karunamon
>Your comment is really_unwarranted...

Not really -_changes like this don't exist in_a_vacuum. Anything that_makes
the_existing_CA's more_indispensable (say, by_driving_customers their_way_by
making it appear bad to not_do_business with them) is a net negative.

------
kbaker
They_should at least wait_for_DANE + DNSSEC, which_is a tangible (and free)
alternative_to the CA system, even though_it would_still be_quite a bit of
effort.

I'd be curious to know how this would_affect local servers in the intranet.
Surely_we wouldn't want to_have to_start_issuing certs for_everything_inside
the firewall_as well?

I think this is a bit_too shortsighted_of a bug report. Anyways, since_this is
not an official_proposal,_I think it will just be_closed as invalid by
Mozilla.

------
peterkelly
I vote for_the NSA logo

 
Which is_better_on_Android: divide by 2 or_shift by 1? - zdw
https://jakewharton.com/which-is-better-on-android