3 ms·

login.gov is using "Let's Encrypt", which is kinda awesome :) Should they have used an EV certificate?

• mholt 9y ago
  Nah. DV gives you the same cryptographic guarantees, but with the benefit of 100% automation.
  • chipperyman573 9y ago
    To add to this, a US government site does not need this, because only the US government site can register a .gov domain.
    • nilved 9y ago
      They can be taken over.
      • zbentley 9y ago
        In which case EV wouldn't get you anything, right (since presumably it would be verified and issued before the site was taken over)?