[cabf_validation] Making progress on disclosures of data sources

[Doug Beattie]

There’s a difference between data quality and data sources.  Defining the data sources will not guarantee that the quality is improved.  That can only be achieved through automation that implements rigorous field validation checks.

 

From: Ryan Sleevi <sleevi at google.com> 
Sent: Wednesday, April 22, 2020 8:26 PM
To: Kirk Hall <Kirk.Hall at entrustdatacard.com>
Cc: CA/Browser Forum Validation SC List <validation at cabforum.org>; Doug Beattie <doug.beattie at globalsign.com>
Subject: Re: Making progress on disclosures of data sources

 

 

 

On Wed, Apr 22, 2020 at 7:10 PM Kirk Hall <Kirk.Hall at entrustdatacard.com <mailto:Kirk.Hall at entrustdatacard.com> > wrote:

OK, you have answered our question – you don’t have any concrete examples you can provide of actual cases where a CA used an “improper” government registry data source to validate the corporate registry number and existence of the Subject in an EV certificate.  

 

I very specifically provided actual cases where a CA used improper government registry data sources to validate the corporate registry number and existence of a Subject. Search for Bolagsverket

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cabforum.org/pipermail/validation/attachments/20200423/b39703bd/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5688 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/validation/attachments/20200423/b39703bd/attachment-0001.p7s>