Re:Extended Validation Certificates Are Really Dead
by Animats on Monday August 12, 2019 @04:47PM
(#20679817)
Google wants to be the world's business authentication provider, but without taking on the responsibilities of an EV certificate issuer to the "relying party".
[ Parent
| on HN ]
Re:Extended Validation Certificates Are Really Dead
by ocdtrekkie on Monday August 12, 2019 @04:56PM
(#20679919)
That was kinda my impression. Extended Validation is supposed to be complicated enough that you shouldn't be able to automate it, and Google hates anything that it can't automate.
Fundamentally I believe security doesn't scale, and that something you can automate is inherently inadequate for security. Which is perhaps why I have so many security problems with Google's approach.
Re:Extended Validation Certificates Are Really Dead
by mbuinl989 on Monday August 12, 2019 @07:32PM
(#20681268)
This is no different to when Microsoft launched their passport services, MS wanted to develop a global register to verify everyone's identity. It didn't work.
The same identity dupe problem highlighted elsewhere re stripe inc registered in Delaware, also exists when it comes to code signing applications on windows.