IssueRaiser

That's true, but EV on its own does provide real value as well.

That's true, but EV on its own does provide real value as well. When you see the green bar, it's proof that it's at least nominally certified to be served from the entity displayed (barring key theft etc). Barring parallel certs, even if it was possible, wouldn't necessarily be a good idea, since there's a lot of legitimate uses for them. For instance, we also have a wildcard (non-EV) certificate for the same domain, covering *.userify.com that we currently use for customer subdomains. I'm far from an apologist for CA's. I think the entire system is broken. It's ridiculous that my browser trusts a Chinese govt CA with the same level of trust as the best US or EU CA, and it's ridiculous that it's so hard for me to customize that level of trust. Still, it's what we have right now. EV does represent some actual effort for every single issued certificate on the part of the CA's, and they do deserve to get paid for that. Whether that payment should cost many hundreds or even thousands of dollars is debatable, however!

Posted by jamiesonbecker on Jul 3, 2015, 6:11 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.5,500 issues0 comments

pricing (FinTech)

That's true, but EV on its own does provide real value as well.

jamiesonbeckerJul 3, 2015, 6:11 PM

That's true, but EV on its own does provide real value as well. When you see the green bar, it's proof that it's at least nominally certified to be served from the entity displayed (barring key theft etc). Barring parallel certs, even if it was possible, wouldn't necessarily be a good idea, since there's a lot of legitimate uses for them. For instance, we also have a wildcard (non-EV) certificate for the same domain, covering *.userify.com that we currently use for customer subdomains. I'm far from an apologist for CA's. I think the entire system is broken. It's ridiculous that my browser trusts a Chinese govt CA with the same level of trust as the best US or EU CA, and it's ridiculous that it's so hard for me to customize that level of trust. Still, it's what we have right now. EV does represent some actual effort for every single issued certificate on the part of the CA's, and they do deserve to get paid for that. Whether that payment should cost many hundreds or even thousands of dollars is debatable, however!

Comments (0)

No comments yet. Start the discussion.

Comment on this issue