4 ms·

Which worked really well with https://stripe.ian.sh/ https://stripe.ian.sh/ Granted, they revoked his cert after he published, but it goes to show how easy it

by cheeze 7y ago

Which worked really well with https://stripe.ian.sh/ https://stripe.ian.sh/ Granted, they revoked his cert after he published, but it goes to show how easy it would be to fake an EV cert and have safari users have no idea.

Ajedi32 7y ago
That's a different thing entirely. Google, as far as I know, has no plans to hide the domain entirely and only show information from EV certs.
- cheeze 7y ago
  Yes. I agree with your characterization here. I'm just blown away that Apple hasn't reverted this. Imo it's a huge vuln.