6 ms·
That’s interesting. I wonder if it would help to show a couple more certificate fields alongside the authentic-sounding name, or if it would all just be equall
by makecheck 8y ago
That’s interesting. I wonder if it would help to show a couple more certificate fields alongside the authentic-sounding name, or if it would all just be equally ignored.
- tialaramex 8y agoAll equally ignored. Moreover, as the original comment points out the Browser doesn't care about any of it. A typical web site involves dozens, even hundreds of resources each of which might have involved a separate connection, separate certificate. Images, scripts, style, and of course dynamic content. But the EV display summarises just one, the one for the original document fetch. A site you're looking at with an EV cert you're happy with might have an image that's supposed to say "Sorry, we're closed for maintenance" with the site's logo. But bad guys, who have a DV cert have substituted "Welcome, please use our new login system". They've also replaced the cool live map and fancy animated carousel below that with their "new" login form. So the site has the EV visuals, but bad guys who broke only DV can subvert it almost totally.