3 ms·
I assume they mean Extended Validation? Basically the only difference is that it gets you a green badge in the URL bar with the name of your business: https://
by Ajedi32 9y ago
I assume they mean Extended Validation?
Basically the only difference is that it gets you a green badge in the URL bar with the name of your business: https://i.stack.imgur.com/xmMnB.png https://i.stack.imgur.com/xmMnB.png
In practice, very few sites actually need EV. Domain validation is usually enough. (Troy Hunt wrote a pretty good article on this a while back: https://www.troyhunt.com/on-the-perceived-value-ev-certs-cas-phishing-lets-encrypt/ https://www.troyhunt.com/on-the-perceived-value-ev-certs-cas...)
- Kliment 9y agoInterestingly, apparently Twitter has switched to EV since that article was published. Not sure if any of the other big10 have also.
- pfg 9y agoI'm not sure if this is still the case, but for some time, Twitter served both EV and non-EV certificates depending on where the visitor was located. I don't think they ever publicly explained this behaviour.
- hsivonen 9y agoWhich, of course, is the worst way to use EV, because it makes both users who expect EV and notice when it's missing worried.