Colin Guthrie wrote: > I appreciate that https doesn't provide "trust" by default, but > ultimately that's how Joe Bloggs public has been told to deal with it > "look for the padlock" etc. etc. to be sure that your session is > secure blah blah. Yeah. Which is probably because all of the intricacies are way beyond Joe Bloggs, so the issue was cut down to something about "trust". > Now with the HV certs the UI also has the company > name in the URL and this *is* going towards a trust infrastructure. I googled, but couldn't find anything - what are HV certificates? /Per -- Per Jessen, Zürich (0.6°C) -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php