3 ms·
The correct way to identify the entity in the address bar is to display the O= (and country, if it differs from the requester) from the X.509 certificate. URLs
by trollbridge 2y ago
The correct way to identify the entity in the address bar is to display the O= (and country, if it differs from the requester) from the X.509 certificate.
URLs following a pattern is not a good way to authenticate a site.
- Symbiote 2y agoFor millions of sites, including this one, that would just show "Let's Encrypt, US".
- trollbridge 2y agoAnd that’s the problem. I know I’m talking to “someone who has convinced Let’s Encrypt, US that they are foobar.com”. I have no idea if I’m actually talking to Foobar, Inc. (incorporated in Delaware, US). There is a standard, reliable register of business entities (typically called “Secretary of State”) and it should be trivial to know if the domain I’m talking to is owned by/part of that entity, that the X.509 matches, and so forth.
- Symbiote 2y agoThat is an EV certificate. They are no longer common. https://en.wikipedia.org/wiki/Extended_Validation_Certificate https://en.wikipedia.org/wiki/Extended_Validation_Certificat...