3 ms·

> Not including the domain in the certificate at all. If an identity is verified, it's verified. Why limit where it can be used, or try and assert some unrelate

by rocqua 7y ago

> Not including the domain in the certificate at all. If an identity is verified, it's verified. Why limit where it can be used, or try and assert some unrelated fact? I strongly disagree. It is still a domain that is entered into the URL box. On the web, websites are defined by their domain name. That is the thing I want verified. For EV I also want verification the domain name matches a company that should have that name. But the core thing is a domain name.

nailer 7y ago
Keep in mind most domains are not typed manually into a URL box.
- rocqua 7y ago
  Still, links and bookmarks point to URLs.
  - nailer 7y ago
    Sure. How do you know the URL is who you think it is? How do I know if withgoogle.com is Google or not? If I do know who I'm communicating with, why do I care about the domain it's on?