News for hackers. Stuff that matters.

A comment on Our First Certificate Is Now Live. Parent comment

Re:Our First Certificate Is Now Live by AnthonyMouse on Tuesday September 15, 2015 @10:17PM (#10224310)
If it says "bankofamericaa.com" your alarm bells should start ringing. Even assuming the attacker can't get a certificate for the right country, how is the user expected to notice (and understand) the wrong country code if they can't notice the wrong domain name?
[ Parent | on HN ]
Re:Our First Certificate Is Now Live by realityking on Thursday September 17, 2015 @08:20AM (#10232891)
I'd argue it's at least simpler to notice since it's more readable - it has spaces between words.
[ Parent | on HN ]
Re:Our First Certificate Is Now Live by AnthonyMouse on Friday September 18, 2015 @01:43AM (#10237656)
Notice that by this point the claimed benefit of the EV cert has lost all connection to the validation process and is now solely an artifact of the impermissibility of spaces in host names.
[ Parent | on HN ]