News for hackers. Stuff that matters.
Re:Extended Validation Certificates Are Really Dead by snowwrestler on Tuesday August 13, 2019 @12:17AM (#20682791)
Apple, Google, Microsoft, all dislike EV for the same reason: because it is a decentralized tool for establishing identity. Identity is something they prefer to own proprietarily because a) they trust themselves more than anyone else, and b) it is lucrative.

The vast majority of examples of EV "problems" are people who misconstrue what EV is supposed to do, and then prove it can't do that thing. For example, EV was never intended to guarantee globally unique company names, so demonstrating a name collision does not actually show a problem with EV.

Re:Extended Validation Certificates Are Really Dead by eridius on Tuesday August 13, 2019 @01:38AM (#20683062)
Why do you claim Apple dislikes a decentralized tool for establishing identity? No part of Apple's business is even remotely related to what EV certs do, and the closest they come to "identity" in general is the recently-announced "Sign In with Apple", which is personal identity for use with other services, not a public identity or anything used for a company. Apple cares about this purely for user experience, nothing else.

I'm not really sure why you're including Microsoft in here either, but I'm a lot less familiar with Microsoft's various product offerings so maybe there is some reason why they care about the public identity business.

Re:Extended Validation Certificates Are Really Dead by snowwrestler on Tuesday August 13, 2019 @02:37AM (#20683325)
You don't think Apple cares whether you feel safer downloading the Bank of America iOS app from their carefully curated App Store, instead of navigating to bankofamerica.com in mobile Safari?
Re:Extended Validation Certificates Are Really Dead by eridius on Tuesday August 13, 2019 @02:46PM (#20688974)
Correct. Apple doesn't make money off of your interaction with BofA either way. They care that you have the best experience and continue to use their platform, but whether you use bankofamerica.com versus a mobile app, it doesn't matter.

Note here that using the mobile app is in no way any form of lock-in, because the exact same app will exist for Android too, and it's free, so there's no barrier to switching platforms.