Hacker News new | ask | show | jobs
by CherryJimbo 2590 days ago
Browsers are moving away from showing differences between EV and DV certs nowadays though. And anyone can register a company name and get an EV cert - that doesn't make it trusted. https://stripe.ian.sh/ is a prime example of this.

HTTPS is a nice reassurance, sure, but an EV cert isn't.

2 comments

> https://stripe.ian.sh/ is a prime example of this.

It used to be. All his EV certs were revoked.

Sure, but my point doesn't change. https://scotthelme.co.uk/the-power-to-revoke-lies-with-the-c... is a good write-up about that.
Company homonyms are an issue, albeit a US specific one. The industry is looking at verifying trademarks, which tend to be monopolies.