News for hackers. Stuff that matters.
Re:Our First Certificate Is Now Live by vacri on Tuesday September 15, 2015 @03:14AM (#10219380)
Green lock = EV cert. People are trained to look for the green, not for the lock - few people other than techies even look for a grey lock. EV certs generally have much more stringent requirements than "hey, give me a cert!".
Re:Our First Certificate Is Now Live by bigiain on Tuesday September 15, 2015 @03:25AM (#10219403)
I'm pretty sure "People are trained to look for the green, not for the lock" is newer and not nearly as widely known advice as "look for the lock". And it's pretty obvious just looking around non-tech-related sites that even the "look for the lock" advice isn't all that well received - so many sites use images of padlocks on the page to imply "banking grade security!!!", surely not _all_ of them are incompetent - I have a strong suspicion that at least some of those people are doing it as part of high statistical significance validated A?B tested funnel optimisations...
Re:Our First Certificate Is Now Live by chinathrow on Tuesday September 15, 2015 @04:13AM (#10219518)
Chrome has a green lock and green 'https' for this site, which hasn't an EV cert.
Re:Our First Certificate Is Now Live by nailer on Tuesday September 15, 2015 @05:20AM (#10219664)
That's correct - only Chrome shows green locks for domain validated certs.

Firefox uses a grey lock for domain validated certs.

Edge uses a hollowed-out grey lock for domain validated certs.