This is a high level question regarding some recent posts about enhancing web browser security from an end-user perspective.
What business/organisation(s) would have:
- Sufficient technical skill to evaluate technologies needed for safe, secure web browsing
- The capacity to publicly recommend a set of technologies to achieve the same
- Does not have conflicting goals of Certificate Authorities nor other goals of other businesses/governments
- Would be likely to revise those recommendations as new information regarding risk and in-the-wild threats were made available
My idea is to have a "Connection Security Index" that is associated with the HTTPS lock Icon.... it's somewhat analogous to the rating approach of the Windows user experience:
I intend work with those companies, and do what is needed to make what I believe is a small yet effective improvement to the user experience regarding HTTPS. (see this link for the change I'm looking to make)