3 ms·
What stops a Russian EV cert vendor for authorizing a EV cert for impostor company Example LLC, when the real corp is Example Inc?
by sbierwagen 11y ago
What stops a Russian EV cert vendor for authorizing a EV cert for impostor company Example LLC, when the real corp is Example Inc?
- nailer 11y ago> What stops a Russian EV cert vendor for authorizing a EV cert for impostor company Example LLC, when the real corp is Example Inc? - The Registry of Companies & Intellectual Property in Russia must accept Example LLC as a valid business name which may be difficult if Example Inc was well known. - The issuing CA must manually inspect all requested domain names in the EV cert and ensure there is no phishing attempt. A certificate request for the hostname 'example.com.example.ru' would be rejected. Depending on how well known Example Inc is - eg, say they were Bank of America - even 'example.ru' may be rejected. - If for some reason this failed and a certificate for the identically named Russian company was issued, it would read 'Example LLC [RU]' in the address bar rather than 'Example Inc [US]'