3 ms·
> you now know that the website you want is actually who they say they are? That's the idea. Of course, validation, while more thorough than for standard certs
by forapurpose 9y ago
> you now know that the website you want is actually who they say they are?
That's the idea. Of course, validation, while more thorough than for standard certs, still is not that reliable. My strong impression is that it could be fooled by anyone sufficiently motivated.
- peterwwillis 9y agoNot only that - in practice it's kind of meaningless, because if you were served a non-EV cert, you wouldn't notice. And there's usually other domains or subdomains that don't use the EV cert. It's mostly just a kind of token gesture by a business to claim they're more secure.
- easyroot 9y agoEV is part of a narrative. Which has some value, even if weak.