On Tue, 15 Feb 2005, bkfsec wrote:
The difference between CAs and the BBB is that the BBB is well known
and highly accountable. CAs are not necessarily. There is no widely
screened public discussion or understanding of the function of CAs.
The accepted root CAs do their jobs on the browser entirely in the
background. Their "seal of approval" is considered implicit by the
lack of a message at all.
The BBB is certainly well known, but describing it as highly accountable
is certainly inaccurate. A quick web search will inform you that the
BBB has local 'affiliates', and that the quality of these 'affiliates'
can vary dramatically from location to location.
There's no widely screened public discussion or understanding of the
function of the BBB - and their seal of approval certainly appears on
sites and businesses they've never heard of.