3 ms·
> but the vast majority of websites out there do not use EV or OV certs and to be fair users by and large don't even notice the difference between a DV and an E
by josteink 9y ago
> but the vast majority of websites out there do not use EV or OV certs and to be fair users by and large don't even notice the difference between a DV and an EV certificate in the first place.
You could also say the same for HTTP vs HTTPS (except HTTPS being considerably slower on unreliable networks).
So what's the value add in forcing everyone (even those who don't want to and have no need) to use HTTPS?
- tialaramex 9y agoThe "no need" case is pretty thin. People seriously underestimate how little you are promised in the plaintext HTTP scenario over a potentially hostile network (ie almost any network) Everything you say, or the site says, can be read and changed by any third party between you on the network and there'd be no sign they did so, no trace left. That's almost never what you actually wanted, so, why should we keep allowing indeed arguably encouraging this practice?