Yeah, Expect-EV would do almost nothing to help prevent phishing. That's what U2F is for. Expect-EV would prevent attacks like[1][2] where a domain is hijacked

Yeah, Expect-EV would do almost nothing to help prevent phishing. That's what U2F is for. Expect-EV would prevent attacks like[1][2] where a domain is hijacked via DNS or BGP. U2F wouldn't help with these attacks. I know that phishing is a much bigger problem than domain hijacks, but domain hijacks do happen, so it would be nice to have protection. [1] https://www.wired.com/2017/04/hackers-hijacked-banks-entire-online-operation/ https://www.wired.com/2017/04/hackers-hijacked-banks-entire-... [2] https://blog.cloudflare.com/bgp-leaks-and-crypto-currencies/ https://blog.cloudflare.com/bgp-leaks-and-crypto-currencies/