4 ms·
Firefox 66 does not show EV indicators, either, any more. But I would also like to point out that PayPal is a known bad player when it comes to phishing, so no
by blattimwind 7y ago
Firefox 66 does not show EV indicators, either, any more.
But I would also like to point out that PayPal is a known bad player when it comes to phishing, so no one really should give a damn what they do, and if you do the opposite of what PayPal does in security you are probably doing better than them.
- Leace 7y agoInteresting because I've got Firefox 67 and Paypal.com does show EV indicator. Actually I see the same in Google Chrome 74.
- jve 7y agoChrome 74.0.3729.157 here on Windows. No EV indicator for paypal here.
- cpburns2009 7y agoFirefox 66.0.3 and Chromium 73.0.3683.86 on Ubuntu both show the EV indicator on PayPal.
- blattimwind 7y ago66.0.4 doesn't, Chrome 60 (old version, kept around for specific reasons) doesn't, Chromium 74 does, all on arch. "Well this is weird".
- penagwin 7y ago66.0.5 on my mac did show the EV cert indicator. Not sure if that would have been part of the .4 -> .5 release or if it's because of the os?
- Twirrim 7y ago67.0 on my Mac does. Chrome 74 does. Not sure if it's possible, but my money is on incorrect certificate deployment somewhere in the Paypal infrastructure, maybe an incomplete bundle somewhere that is affecting the "EV" evaluation.
- PuffinBlue 7y agoI replicate your findings too. FF67 and C74 in Ubuntu 19.04 shows EV certs on both.
- penagwin 7y agoI'm seeing the EV indicator with Chrome 74.0.3729.169 on Mac OSX Mojave 10.14 (18A391) Edit: I also see the EV cert on Firefox 66.0.5 and 67. I can't really tell if safari has an EV indicator or not? I really don't use it much but it looks like this https://i.imgur.com/9asQkbN.png https://i.imgur.com/9asQkbN.png Safari version 12.0 (14606.1.36.1.9)
- alistairSH 7y agoOn MacOS, Safari uses the green (as shown in your png) for EV certs. HN does not appear to have an EV cert, as it's a gray padlock (not green). And, Paypal does appear with the EV green on my Mac as well.
- SlowRobotAhead 7y agoPaypal URL is green in iPhone Safari. Normal TLS sites are black. Sites with no SSL/TLS say “Not Secured —“ before the site name.
- Semaphor 7y agoI have Firefox 69 on Windows and it does
- LeoPanthera 7y ago> But I would also like to point out that PayPal is a known bad player when it comes to phishing, so no one really should give a damn what they do, and if you do the opposite of what PayPal does in security you are probably doing better than them. I can't even imagine what you are referring to here. PayPal phishes people? Citation needed, please.
- blattimwind 7y agoPaypal does its best to make all its emails look like phishing by using a quadrizillion of different origins (stuff like paypal-service.com, paypal-australia.com.au, paypalcustomercommunication.com etc.) and routing links through another set of phishy origins and/or external third parties, and to top it all off they give bogus advice like "You can see this email is from Paypal because we are using your proper first and last name". A lot of the bigger companies are guilty of this, Google is probably one of the few exceptions, since emails from Google tend to actually originate from ...@google.com, and their logins are all handled through accounts.google.com, unlike e.g. Microsoft which still has a handful of different login portals for the same account on non-microsoft.com domains (such as "msauth.net"). E.g. Dropbox sends emails from half a dozen or so origins, Microsoft uses a bunch, too, including shit like "microsoftmail.com" which rivals some of Paypal's choices for phishiness.
- dhimes 7y agoI have found PayPal to be excellent in response to phishing attempts- but that's an N of 1 and as an outsider.