Hackers mostly are using free comodo certificates?!

[JoWa]

Do I ever know that?

@Melih post:23

Of course if i am logging onto my mail server and i know the URL/IP address (where there is a pre-established trust exist between me and the URL/IP) i might not need authentication but just encryption. You see in reality you will always need Authentication for encryption, but sometimes that authentication is Pre-established. In cases where “authentication” is pre-established, all you need is just encryption.

So, for the forums with DV-certificates where I log in frequently, the pre-established trust is authentication enough?

And to return to your article, is the real problem DV, or is it that a person who enters its login credentials on what looks like a PayPal-site, but has a totally different URL, did not look at the URL-bar at all, not noticing the incorrect URL and the missing EV-indicator?