4 ms·
Probably because EV certs are a stupid idea. Do you really know the difference between Citi Bank and Citibank? No? Then EV hasn't saved you from being phished.
by bandrami 11y ago
Probably because EV certs are a stupid idea.
Do you really know the difference between Citi Bank and Citibank? No? Then EV hasn't saved you from being phished.
- mike_hearn 11y agoEV certs are expensive because they have people in the loop, and so getting a cert for an obviously misleading name should be much harder. You'd have to pass an eyeballed sanity check.
- bandrami 11y agoYou have much greater faith in the CAs' probity and competence than I think is warranted.
- Gregordinary 11y agoWell, you can't just order an EV cert for "Citi Bank" unless you have "Citi Bank" registered as a legal entity. Section 9.2.1 (Page 9): https://cabforum.org/wp-content/uploads/EV-V1_5_7.pdf https://cabforum.org/wp-content/uploads/EV-V1_5_7.pdf In addition to using & verifying the legally registered name, it must be verified that there is a physical address for the business, if that address doesn't match the registered location, additional verification is required. There are additional provisions of verification as well. See section 11 of the same document.
- bandrami 11y agoObviously the Citi example was a joke, but most actual certificates I see are to "R L Media Enterprises" or whatever the D&B name of the business is, which is opaque to me anyways.