3 ms·
Thx. But why hide it so that normal web user can't access it? Checking what Cert-company signed the certificate is important to trust a site. Before it was o
by frik 9y ago
Thx.
But why hide it so that normal web user can't access it?
Checking what Cert-company signed the certificate is important to trust a site.
Before it was one left click and it showed the company that signed the cert (optional you could view the cert itself)
Now many steps like click on hamburger button -> More tools -> Developer Tools -> Security tab (bottom of screen) -> View Certificate (shows certificate itself)
What a trainwreck of decision t remove this vital info. e.g. YCombinator cert is from "Comodo". If it's suddenly from a funky else it would help lessen the trust.
I am sure, it was just a mistake to remove it and some cargo cult.
- qb45 9y agoMust be a Chrome thing. In Firefox 54 it's three clicks: lock icon, ">", "more info". Actually the second click already gives some summary including issuer.
- collinmanderson 9y agoThe browsers probably want to start relying on HTTP Public Key Pinning rather than relying on the user to verify the public key.