5 ms·
Isn't this what SSL is for, proving identity? In this case, even a cursory look at the URL would indicate that something was up. Sure, this makes fishing a li
by jluxenberg 17y ago
Isn't this what SSL is for, proving identity? In this case, even a cursory look at the URL would indicate that something was up.
Sure, this makes fishing a little easier, but users need to watch out for themselves. It's a big bad world out there :)
- MichaelGG 17y agoYes, but it's not hard to get an SSL cert for some random domain. So user clicks a youtube link, ends up on "centralised-video-authentication.com", sees SSL icon, all good? I agree with you in general, but youtube shouldn't be making things harder for security.
- lsc 17y agoyou need to watch out, certainly, however you should also encourage webapp providers to write secure code.
- bcl 17y agoSSL doesn't prove identity. It just proves that the connection is encrypted. CA's try to add a layer of trust on top of this with their different levels of certification, but that doesn't guarantee identity.