3 ms·
Huh? EV certificates are actually certifying you're the (juristical) person you're claiming to be based on ID and trade register checks, unlike Let's Encrypt ce
by tannhaeuser 2y ago
Huh? EV certificates are actually certifying you're the (juristical) person you're claiming to be based on ID and trade register checks, unlike Let's Encrypt certificates which only certify you're in possession of a domain. Isn't using EV certificates legally required for e-commerce web sites at least in parts of the world, and also obligatory for rolling out as MasterCard/Visa merchant by their anti-fraud requirements along with vulnerability checks and CI/site update processes being in place?
- khuey 2y ago> Isn't using EV certificates legally required for e-commerce web sites at least in parts of the world Not in any jurisdiction I'm aware of, though it's a big world so it wouldn't shock me if some small corner of it has bad laws. > and also obligatory for rolling out as MasterCard/Visa merchant by their anti-fraud requirements PCI DSS does not require EV certificates.