3 ms·
> I'd say EV worked perfectly. Ian run a legit site, not phishing, so what's perfect in revoking his EV cert and not giving back cash?
by Promarged 8y ago
> I'd say EV worked perfectly.
Ian run a legit site, not phishing, so what's perfect in revoking his EV cert and not giving back cash?
- dingo_bat 8y ago> Ian run a legit site, not phishing He originally had a site that looked extremely similar to stripe's official website: https://news.ycombinator.com/item?id=16939094 https://news.ycombinator.com/item?id=16939094
- Scott_Helme_ 8y agoI can't find any copies of that in any cache showing it was ever actually online, simply mocked-up photos posted to social media.
- dingo_bat 8y agoPosted by Ian himself. Why would he go to the trouble of mocking it up?
- pfg 8y agoPresumably to demonstrate that a phishing site using such a certificate would be visually indistinguishable from the targeted site.
- Scott_Helme_ 8y agoThere's a difference between resolving something locally or setting up a demo for the purposes of capturing screenshots and having a website resolve on the public Internet and serve that content.