4 ms·
I wonder whether spammers and phishers will make use of that? We often tell people to look for the lock symbol or "https" - those will no longer be (weak) sign
by edent 11y ago
I wonder whether spammers and phishers will make use of that? We often tell people to look for the lock symbol or "https" - those will no longer be (weak) signifiers of trust.
- thetmkay 11y agoDV SSL certificates are not effective counter-measures for phishing or scammers. That's one of major advantages of EV certificates. EV SSL (instead of the green lock) appear as the company name in a green bar (see GitHub, Stripe etc). Almost all financial institutions use EV for any account handling (in fact I think it's technically against regulation for a CA to offer DV to those). The downside to EV is that it isn't free - the validation is much stronger and actually requires (human) resources and time to validate that the domain (and buyer of the cert) represents a government-recognized company/organization.
- toddn 11y agoProbably. Let's Encrypt has a pretty good response to that: https://letsencrypt.org/2015/10/29/phishing-and-malware.html https://letsencrypt.org/2015/10/29/phishing-and-malware.html