4 ms·
This is pretty silly. Customers don't care or know what EV SSLs are and the level of functional security is no different. We didn't renew our EV SSL and went
by shiftpgdn 11y ago
This is pretty silly. Customers don't care or know what EV SSLs are and the level of functional security is no different.
We didn't renew our EV SSL and went to a domain validated SSL. Our number of daily orders actually went up (this is probably just company growth.)
- ceejayoz 11y agoHell, even Amazon.com and Google.com can't be bothered to go EV.
- UnoriginalGuy 11y agoGoogle I'll grant, but Amazon's site is actually insecure, not only do they lack EV but they lack even "basic" SSL/HTTPS across the board. They deliver cookies via HTTP (without even flagging them HTTP only) and an attack can intercept/modify the HTTP page in order to redirect a user who hits the "login" button to a server controlled by the attacker (essentially turning the real Amazon.com page into a giant philishing attack on an insecure network). Amazon should be ashamed of themselves in 2015. No assets let alone their home page should be non-HTTPS.
- dheera 11y agoYep. Actually you can even self-sign certificates and you'll probably be fine as long as it's not a production launch. For better or worse most users are just click through the browser warnings anyway.
- teekert 11y agoI don't know on what browser you are but the Firefox warning is pretty frightening.
- dheera 11y agoWell a lot of free WiFi places trigger it because they use a man-in-the-middle HTTP(S) server to serve up the (utterly pointless) login screen. So I have to regularly click through the warning screen, even for www.google.com ...
- brixon 11y agoPeople more understand that SSL prevents clear text transfer of data. People have been trained to understand that passwords and credit card data should use HTTPS. As long as you accomplish this, then any extra value is not seen by users.
- marcosdumay 11y agoIs there any extra value at all? Anyway, I doubt most users even check for the padlock and will gladly send their data trough HTTP. Even if they do chack, they'll have no idea what the green bar means.