2 ms·
Yes, and that's a problem with browser UI that should be solved. This is a major flaw I've seen with a lot of the anti-EV rhetoric that's been espoused in rece
by Ajedi32 5y ago
Yes, and that's a problem with browser UI that should be solved.
This is a major flaw I've seen with a lot of the anti-EV rhetoric that's been espoused in recent years by security experts and browser vendors. They correctly identify that the EV certificate system has major flaws, then incorrectly conclude that rather than fix those flaws, the solution is to get rid of the EV certificate system.
Yes, EV certs are currently insufficient as means of identity verification. How does eliminating EV certificates solve that problem? What alternative is being proposed that would be better than EV certificates at verifying the identity of real-world entities? So far, the plan seems to be to just get rid of EV certificates and replace them with... nothing? That's not exactly helping the situation.