There is a new security magic solution! It's called Extended Validation SSL certificates. For me, this is extremely dumb. First, do you really know what kind of security a SSL certificate can provide? SSL certificates can't provide security by themselves. The certificate role during a SSL session is to provide a way to ensure the identity of the peers, normally the server only. They are digitally signed by a company that is trusted by both parties in the communication.
EV SSL - Was it really necessary?
EV SSL - Was it really necessary?
EV SSL - Was it really necessary?
There is a new security magic solution! It's called Extended Validation SSL certificates. For me, this is extremely dumb. First, do you really know what kind of security a SSL certificate can provide? SSL certificates can't provide security by themselves. The certificate role during a SSL session is to provide a way to ensure the identity of the peers, normally the server only. They are digitally signed by a company that is trusted by both parties in the communication.