<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 10/29/2008 02:43 AM, Breno de Medeiros:<br>
<blockquote
cite="mid:29fb00360810281743s47f695f5s51aad53bbeb2861a@mail.gmail.com"
type="cite">
<blockquote type="cite">
<pre wrap="">
PAPE doesn't protect against anything, it gives an opinion about the
authentication methods used. There is no authority or standards body
confirming implementations.
</pre>
</blockquote>
<pre wrap=""><!---->
This is equivalent to say that non-EV SSL certificates do not protect
against anything, but EV certificates do because the implementations
are confirmed.
</pre>
</blockquote>
<br>
Non-EV certificates protect at least against MITM attacks, EV provide
additionally identification according to the EV guidelines as defined
by the EV/Browser forum. Non-EV may do that too, but not according to
the same guidelines....but I guess this is the wrong forum for this
kind of discussions.<br>
<br>
However PAPE doesn't give and can't give any guaranties whatsoever. It
provides an <b>opinion</b> of the provider concerning the implemented
authentication methods. It's upon the RP to make the correct assessment
concerning the information received. This is like self-signed
certificates - it's a claim but you don't know for sure (except in the
rare case you've got the fingerprint and you know the other party).<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>