Yellow padlock is losing its trusted status :(

[Guest]

[Endymion]

I guess there is no browser which natively distinguish OV-SSL from DV-SSL certs.


Even firefox show the same blue bar of DV ssl certs for https://www.microsoft.com/ whose cert ought to be an OV one as Organizational info about Microsoft is included in the certificate details thus allowing users to confirm the identity of the recipient

[SS26]

Well, encryption without authentication is useless. Encryption is about allowing only the intendent receipient to read the message. If you don't know who the recipient is then you could be encrypting it for the fraudster and you wouldn't know...so without authentication encryption becomes useless.

Melih

You provided a link to real-world example (in some of your earlier messages). Here is that link. I think the example could help understand case better (hence i repeated your link here)

[DerekS]

To illustrate the point:
https://www.e-abbey.com/bankhome/

However, at the other end of that link is not Abbey Bank, despite what it looks like 

Earlier is was https://www.clydesdalebplc.com/en-gb/, but not Clydesdale bank.

Before that ...

Yes, a serious problem. While we are still trying to teach the ordinary user to at least look for a padlock, the rules have changed even before they learnt the lesson.

Why does the phrase consumer confusion jump to mind?

[SiberLynx]

Hi DerekS ,

Interesting...

as for "https: //www. e-abbey.com /bankhome/"

That's what I am getting with Fox security set here


Neither McAfee Advisor nor Norton Safe Web can recognize it

Comodo's Site Inspector (CSI), I may say it again here in the forum unfortunately as usual just goes into deep Nirvana cycle.
I have an impression that the thing (CSI) is not working properly at all... (that's either Ok on bad sites or this "cycling" behaviour - waiting /done forever & no result)

Would be nice if Vengine would do something ... ut probably that is  here

... haven't checked "clydesdalebplc" ...gotta run now 

Cheers!

[DerekS]

That's what I am getting with Fox security set here

Yes, guilty. The domain is on it's way as well.

[Tags:]