4 ms·
I really miss the days when EV certificates where highlighted in the address bar. I feel like nowadays it would be easier to get scammed, due things like unicod
by mhitza 5y ago
I really miss the days when EV certificates where highlighted in the address bar. I feel like nowadays it would be easier to get scammed, due things like unicode characters in URLs for example.
- mholt 5y agoOh, I did my masters thesis about this [1]! EV certs have long been known to be ineffective at preventing fraud. In fact, they can enhance fraudulent activity with a false sense of trust. And that's if users even notice it and know what it means (most don't). Chrome has since adopted some ideas from my thesis which attempt to warn you if you're at risk based on suspicious characteristics of the site you're on, like unusual patterns in domain names. [1]: https://scholarsarchive.byu.edu/etd/7403/ https://scholarsarchive.byu.edu/etd/7403/
- jakub_g 5y agoAFAIR someone bought EV certs a few years ago that visually looked like apple.com and paypal.com which showed the EV thing was useless.