We're 18 months old and the main reason we exist is to make the identity verification EV adds not a pain in the arse.
Here's a list of ways we do EV differently from other providers: https://certsimple.com/about
I've been on HN for nearly as long as pg has so feel free to give me a shout here if you have any questions. It's past midnight in the UK right now so I'll answer them tomorrow morning. If you prefer email: mike@certsimple.
Landscape seems to work fine though.
EV certificates do not add additional security as far as I am aware, it's simply a measure of extended validation of the customer, which in my experience is only fluff.
So going with Let's Encrypt may as well do the full cycle and sell this free solution to non-technical people who believe EV provides additional value.
Hard sell... I know.
Correct.
> ...which in my experience is only fluff.
Depends on what you want to accomplish. If you just care about getting to SOME website with a secure connection than a DV certificate is all you need.
But take my employer: Capital One. We're a bank. When people go to https://www.capitalone.com it is important that they get our website. ALSO, though, it is important that when people go to https://www.capitalοne.com that they do NOT get some malicious website. (Can't see the difference? What glyph did I use for the letter "o"?) This is just one example of how an EV certificates can be useful for certain purposes, although it may not apply to your business.
Before this, the Technical Solutions Director tweeted solutions that did not work for end users, but highlighted a typical IT centric approach to problem resolution ("Works, What's the problem?") [1]
For anyone not already aware, check out Let's Encrypt. I am evaluating it for about 200 domains now in earnest after having it on my horizon for some time. At least to have it ready as a fallback. [2]
Getting 200 EV certificates in a hurry from a different CA has been costly this morning.
[1] - https://twitter.com/vanbroup/status/786548172864626690 [2] - https://letsencrypt.org/