Ask HN: Why most big websites aren't using EV SSL?

2 pointsNala_Alan8y ago1 comments

I recently found myself wondering, why big sites such as Facebook, Google, Github etc usually aren't using EV SSL certificates? It probably would make non-technical users trust the website more and perhaps make them more aware of phishing (eh, I don't believe in that myself, but it's still nice to dream...), and it's not like they can't afford it.

1 comments

1 comments · 1 top-level

brianjking8y ago

Scott Helme, a security researcher has an article on EV certificates and some of the issues with them in an article from December 2017 (https://scotthelme.co.uk/are-ev-certificates-worth-the-paper...). There was some discussion on this when it was originally submitted to HN at https://news.ycombinator.com/item?id=15850837.

Adam Caudill also has some insight here: https://adamcaudill.com/2017/04/09/looking-value-ev-certific...

j / k navigate · click thread line to collapse