6 ms·

The tone of the article is such because the company writing it only sells EV certs and therefore is on a relentless quest to discredit DV certs as inferior.

nailer 11y ago
Author here: DV certificates are inferior. Knowing whose key you're encrypting with is a good thing. DNS providers do not do identity checks. Edit: 100% agreed with laumars' point below regarding blogs and low trust sites. DV certificates have their place, it's just that high trust websites aren't it. I've added an author tag as requested.
- laumars 11y ago
  If I'm connecting to my bank or preferred e-commerce store, then yes. If I'm connecting to Joe's wordpress blog or some random wiki then I barely care if the site is even under TLS to begin with, let alone whether the site had passed a human authorisation process prior to receiving their certificate. And frankly, the vast majority of internet go-ers are non-technical and wouldn't even notice the different between DV and EV certificates (let alone care), so I question just how well EV even solves the problem you're claiming to address. It's also generally good etiquette to disclose when you're the author and employee of the company in question (a company that specifically sells EV certificates) when replying on HN; since that highlights biases regarding your arguments
- sloanroyal 11y ago
  Person who just registered certsimple.org and certsimple.net here. Will you issue me a EV cert?
  - colinbartlett 11y ago
    That's pretty hilarious. I'm sure even if CertSimple won't issue you an EV cert that one of the many providers others will.
  - sloanroyal 11y ago
    I just noticed he's in the UK, so surely he's registered certsimple.co.uk, right? Nope. Yay, now I have another domain! I will begin issuing EV certs via my new company 'Certs Imple Limited' very soon. You can trust us, we have more domains than that other fly by night organization does.

nailer 11y ago

Author here: DV certificates are inferior. Knowing whose key you're encrypting with is a good thing. DNS providers do not do identity checks. Edit: 100% agreed with laumars' point below regarding blogs and low trust sites. DV certificates have their place, it's just that high trust websites aren't it. I've added an author tag as requested.

laumars 11y ago
If I'm connecting to my bank or preferred e-commerce store, then yes. If I'm connecting to Joe's wordpress blog or some random wiki then I barely care if the site is even under TLS to begin with, let alone whether the site had passed a human authorisation process prior to receiving their certificate. And frankly, the vast majority of internet go-ers are non-technical and wouldn't even notice the different between DV and EV certificates (let alone care), so I question just how well EV even solves the problem you're claiming to address. It's also generally good etiquette to disclose when you're the author and employee of the company in question (a company that specifically sells EV certificates) when replying on HN; since that highlights biases regarding your arguments
sloanroyal 11y ago
Person who just registered certsimple.org and certsimple.net here. Will you issue me a EV cert?
- colinbartlett 11y ago
  That's pretty hilarious. I'm sure even if CertSimple won't issue you an EV cert that one of the many providers others will.
- sloanroyal 11y ago
  I just noticed he's in the UK, so surely he's registered certsimple.co.uk, right? Nope. Yay, now I have another domain! I will begin issuing EV certs via my new company 'Certs Imple Limited' very soon. You can trust us, we have more domains than that other fly by night organization does.