3 ms·
not for proving identity - how do you prove that ebay is ebay or that bank site really is Barclays and not some scammer
by mauricemir 12y ago
not for proving identity - how do you prove that ebay is ebay or that bank site really is Barclays and not some scammer
- moe 12y agoNot with SSL certs anyway. At least not as long as your browser trusts hundreds of CA's, including shady ones such as Comodo[1] who will issue fake certs to any name (Google, Skype, etc.). [1] https://www.schneier.com/blog/archives/2011/03/comodo_group_is.html https://www.schneier.com/blog/archives/2011/03/comodo_group_...
- eli 12y agoThe fact that Comodo is occasionally scammed (a headline-generating event) does not prove that they add no level of identity authentication.
- ceejayoz 12y agoWith an email hostmaster/webmaster@example.com and/or a DNS record. EV certs require more, but DV certs have their identities verified automatically in seconds.