Oh, I did my masters thesis about this [1]! EV certs have long been known to be ineffective at preventing fraud. In fact, they can enhance fraudulent activity

Oh, I did my masters thesis about this [1]! EV certs have long been known to be ineffective at preventing fraud. In fact, they can enhance fraudulent activity with a false sense of trust. And that's if users even notice it and know what it means (most don't). Chrome has since adopted some ideas from my thesis which attempt to warn you if you're at risk based on suspicious characteristics of the site you're on, like unusual patterns in domain names. [1]: https://scholarsarchive.byu.edu/etd/7403/ https://scholarsarchive.byu.edu/etd/7403/