If you click through to the page the article is referring to, his description of the problem is far better than Ars' summary[0], and he basically says some of t

If you click through to the page the article is referring to, his description of the problem is far better than Ars' summary[0], and he basically says some of the things you said. He is however more pessimistic: > There will undoubtedly be many proposed solutions to this issue. Ultimately, though, any method that ends up giving users a legal entity is fatally flawed. As a result of how extended validation certificates work, browsers have few options to fix this. Having said that, they can take steps to ensure EV certificates do not override other critical parts of the user interface, like Safari does. [0] Edit: Actually, on this note, might I suggest the HN link be changed to point to https://stripe.ian.sh/ https://stripe.ian.sh/