415802 - rethink larry phrasing for non-EV certs

Status: RESOLVED DUPLICATE of bug 1029862

(Firefox :: Address Bar, defect)

Description

[Vladimir Vukicevic [:vlad] [:vladv] (needinfo me, slow to respond)]

Right now, if you go to a non-EV SSL site, such as bugzilla.mozilla.org, the larry dialog says:

You are connected to:
  mozilla.org
which is run by
  (no information provided)

Verified by: Equifax

For the EV case, we have a lot more information, but we still say "Verified by: CA".  In the EV case, I think "Verified" makes sense, because there is explicit verification that the business/address is the one that's associated to the URL that you're connecting to.

For the non-EV case though, the only thing that's verified is that you are communicating with that particular hostname.  I don't think that "verified" is the right word here -- the CA verifying the hostname is a lot less concrete than the verification of the business/address-hostname connection.  Also, with no additional information, the biggest thing in that dialog box is "mozilla.org", and then "Verified by: Equifax" is the only other bit of information there, which to me implies a stronger connection between Equifax and the content on mozilla.org (as opposed to just the domain name 'mozilla.org') than actually exists.

I would suggest changing "Verified by" to something else for the non-EV case.  Suggestions:

"Hostname validated by:"
"Domain verified by:"
"Validated by:"

Comment 1

[Josh Triplett]

This still applies to Firefox 4.

The "(no information provided)" could use reworking as well...

Comment 2

[Josh Triplett]

(In reply to comment #1)
> This still applies to Firefox 4.
> 
> The "(no information provided)" could use reworking as well...

Or rather, "(unknown)", which still needs reworking.

Comment 3

[:Cykesiopka]

This was fixed in Bug 1029862.