undefined | Better HN

0 pointscolejohnson668y ago0 comments

So in addition to knowing that your browser is connected to where you want, you now know that the website you want is actually who they say they are?

0 comments

kzrdude8y ago

Of course you also need a browser and/or OS to establish the roots of the trust relations.

gcb08y ago

...and hope symantec/komodo/et al won't start selling those certs by the bucket.

forapurpose8y ago

> you now know that the website you want is actually who they say they are?

That's the idea. Of course, validation, while more thorough than for standard certs, still is not that reliable. My strong impression is that it could be fooled by anyone sufficiently motivated.

peterwwillis8y ago

Not only that - in practice it's kind of meaningless, because if you were served a non-EV cert, you wouldn't notice. And there's usually other domains or subdomains that don't use the EV cert. It's mostly just a kind of token gesture by a business to claim they're more secure.

easyroot8y ago

EV is part of a narrative. Which has some value, even if weak.

yourself928y ago

Exactly

j / k navigate · click thread line to collapse