News for hackers. Stuff that matters.

A comment on PayPal's Beautiful Demonstration of Extended Validation FUD. Parent comment

Re:PayPal's Beautiful Demonstration of Extended Validation FUD by CherryJimbo on Thursday May 23, 2019 @09:34PM (#19997721)
Browsers are moving away from showing differences between EV and DV certs nowadays though. And anyone can register a company name and get an EV cert - that doesn't make it trusted. https://stripe.ian.sh/ is a prime example of this.

HTTPS is a nice reassurance, sure, but an EV cert isn't.

[ Parent | on HN ]
Re:PayPal's Beautiful Demonstration of Extended Validation FUD by LeoPanthera on Thursday May 23, 2019 @09:58PM (#19997839)
> https://stripe.ian.sh/ is a prime example of this.

It used to be. All his EV certs were revoked.

[ Parent | on HN ]
Re:PayPal's Beautiful Demonstration of Extended Validation FUD by CherryJimbo on Thursday May 23, 2019 @10:24PM (#19997953)
Sure, but my point doesn't change. https://scotthelme.co.uk/the-power-to-revoke-lies-with-the-c... is a good write-up about that.
[ Parent | on HN ]
Re:PayPal's Beautiful Demonstration of Extended Validation FUD by nailer on Friday May 24, 2019 @11:26AM (#20002530)
Company homonyms are an issue, albeit a US specific one. The industry is looking at verifying trademarks, which tend to be monopolies.
[ Parent | on HN ]