Remove extended-validation-certificates-are-dead
article thumbnail

Extended Validation Certificates are (Really, Really) Dead

Troy Hunt

(..)

102
102
article thumbnail

Extended Validation Certificates are Dead

Troy Hunt

That's it - I'm calling it - extended validation certificates are dead. Moving on, they then state that you can "activate the green address bar" simply by purchasing an EV cert: To activate the green address bar on your website, you just need to purchase and install an Extended Validation (EV) SSL certificate.

Marketing 110
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Weekly Update 152

Troy Hunt

(you've got 2 days until the old versions die) Chegg had 40M accounts breach with unsalted MD5 password hashes! (it

article thumbnail

Here's Why Your Static Website Needs HTTPS

Troy Hunt

The rapid adoption has been driven by a combination of ever more visible browser warnings (it was Chrome and Firefox's changes which prompted the aforementioned tipping point post), more easily accessible certificates via both Let's Encrypt and Cloudflare and a growing awareness of the risks that unencrypted traffic presents.

Risk 110
article thumbnail

PayPal's Beautiful Demonstration of Extended Validation FUD

Troy Hunt

Sometimes the discussion around extended validation certificates (EV) feels a little like flogging a dead horse. In fact, it was only September that I proposed EV certificates are already dead for all sorts of good reasons that have only been reinforced since that time.

Phishing 103
article thumbnail

How Everything We're Told About Website Identity Assurance is Wrong

Troy Hunt

We see it every day; weight loss pills, make money fast schemes and if you travel in the same circles I do, claims that extended validation (EV) certificates actually do something useful: Why are you still claiming this @digicert ? I have a vehement dislike for misleading advertising. So, all good right? EV is better?

Phishing 134