3 ms·
Worked for payment provider : at one point customers did not trust our checkout page because it was not EV ( it was plain SSL ). For financial stuff it is appa
by the-dude 9y ago
Worked for payment provider : at one point customers did not trust our checkout page because it was not EV ( it was plain SSL ).
For financial stuff it is apparently expected ( NL ).
- rocqua 9y agoHow many customers? And how technically apt are they? I know my grandparents never see the EV certs, because their AV does TLS termination (I tried to talk my uncle out of it, but he really trusts AV). I don't see anyone I know caring about an EV cert missing for a payment provider. The only exception I can think of would be for big national banks (Rabobank, ING, etc) for those it might be weird not to see EV because all the others have it.
- the-dude 9y agoIt was not mollie.nl, but similar.
- rocqua 9y agoI can see that being a weird edge case. Especially because mollie is often used by smaller sites. The first few times I saw the name, it felt rather sketchy that I was paying to mollie rather than whatever business I was buying from.
- thinkMOAR 9y ago[company name redacted]
- deleted 9y ago[deleted]
- thinkMOAR 9y agoI wouldn't be surprised if you got fired. Disclosing lots of information, even i think your ex employer wouldn't really like it if you disclosed that without EV sales took a tumble. Generally upsets customers that you ruined their potential sales. If you call me posting the company name a dox, perhaps don't share so much information online. My grandmom could have figured this out. </let the minus votes flow in>
- sctb 9y agoWould you mind taking a look at the guidelines? This not a civil comment and not how we conduct ourselves on Hacker News. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- thinkMOAR 9y agoI looked at the guidelines many times even before creating an account, but apparently my definition of civil and other people differ. Perhaps you could be more specific in the guidelines. A comment about the carelessness of a ex employee regarding his own privacy and the reputation of the company he worked for (and yes that can be a bad thing to do, reminding somebody of that i tend to consider civil) and a hyperbolic statement regarding the accusation of 'doxing', as it just required a single google search, don't seem uncivil to me.
- Scott_Helme_ 9y agoThere is a huge presence of EV on financial sites where it is used considerably more than in any other sector. I never did come across a reasonable explanation for that though, I'd be interested to know why.
- the-dude 9y agoI got the impression this customer did not trust our SSL because all Dutch banks use EV, and she was going to do a 'bank transaction'. Specifically iDeal, which is implemented by the banks. But our checkout proces was one step before this. So maybe it is a network effect within financials?