By: Uli Gue

Uli Gue — Sun, 24 Oct 2010 04:27:01 +0000

No. According to documentation available at CabForum, EV certificates does not provide a safe checking of certificate, because the browser believes at OCSP host provided by certificate. OIDs inserted are not verified because there is none trusted service, unless interactive ones thought IANA, able to verify that OID. The only “safe” implemented is a “trust”, under commercial point of view, between enterprises involved at EV project. All of them are related at cabforum site (www.cabforum.com).
Mozilla products, for instance, inserts a list of embedded TRUSTED CAs, that are the same for NON EV CAs. So, under technical point of view, there is not improvements, but a “big commercial deal”. Once the number of Certificates Providers increases at Internet at last 10 years increasing the competition, Certificates Providers had lower profits, which resulted in the EV proposal.

By: Joseph A'Deo

Joseph A'Deo — Tue, 10 Aug 2010 21:39:44 +0000

Thanks for the EV notes in this article. At VeriSign we also discuss the strength of the green url bar itself — it’s unspoofable by hackers, so it cuts down on phishing attempts quite a bit. Any “fake” sites built to purloin customers’ private info can easily be spotted by the lack of green in the url bar if one’s legit site happens to be encrypted with extended validation ssl. Just another reason to protect one’s webpages in this manner, and foster a trustworthy relationship with potential buyers.

Comments on: The Rationale Behind Extended Validation (EV) SSL Certificates

By: Uli Gue

By: Joseph A'Deo