3 ms·
Which is why I look for the organization's name in the browser bar when I'm logging in to a high-value website (Google, Apple my bank, etc). For those who don't
by jdavis703 10y ago
Which is why I look for the organization's name in the browser bar when I'm logging in to a high-value website (Google, Apple my bank, etc). For those who don't know the UI for extended verification certificates see the difference in the screenshot: http://imgur.com/a/ycVwA http://imgur.com/a/ycVwA.
- calebegg 10y agoGoogle doesn't use EV certs.
- tener 10y agoThis is very easy to miss, even as a technical user. Still good advice.
- rb808 10y agoThis was posted the other day, checking its green isn't enough. https://www.xudongz.com/blog/2017/idn-phishing/ https://www.xudongz.com/blog/2017/idn-phishing/ Edited: you're right I thought you meant just check its https.
- roywiggins 10y agoThat is an ordinary DV cert. GP is talking about EV certs, which in theory assures you that Apple, Inc. specifically owns the domain name you're on, not just the operator of the server.
- danielsamuels 10y agoDoesn't work very well if you're on a Google site: http://i.imgur.com/1JMASfH.png http://i.imgur.com/1JMASfH.png