Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Your proposal seems like it doesn't really change anything? Users are still left to "do their own reconnaissance".

Research suggests they don't do a very good job at that.



No, I think his point is that you need to provide a good amount of info to get an EV certificate, but then almost none of that info is included in the certificate. Combine that with the fact that what little relevant info about the certificate is buried in a relatively hard to find (for the average user) section of their browser, and it's no wonder that EV certificates have gone from "expensive novelty that nobody notices" to "effectively pointless"




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: