CA / B Forum is considering the possibility of fixing the amount of compensation from the certification authorities for incorrectly issued EV SSL certificates

Members of the CA / B Forum are considering the possibility of revising the conditions related to the payment of compensation by certification authorities in customer’s favor due to the improper issuance or compromise of EV SSL certificates.

As stated in the proposal made by Kirk Hall and supplemented by Peter Bowen, the certifying authority cannot establish the amount of compensation to clients or parties on legally justified claims less than:

• $ 2000 for EV SSL certificate for single client.
  
• $ 100,000 in total for all claims from all customers and parties for the EV SSL certificate.
  
• $ 5,000,000 in total for all claims from all customers and parties for all EV SSL certificates issued by the certification authority during any continuous 12-month period.
  

The proposal is currently pending and will be subsequently voted on.

In case if proposal will be adopted, certifying authorities will need to carefully approach the implementation of an extended validation when issuing EV SSL certificates.