{"id":5679,"date":"2019-10-08T16:01:31","date_gmt":"2019-10-08T16:01:31","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=5679"},"modified":"2019-10-08T16:01:31","modified_gmt":"2019-10-08T16:01:31","slug":"new-comment-on-reddit-111","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=5679","title":{"rendered":"New comment on reddit"},"content":{"rendered":"
\n
\n

I wasn\u2019t clear what I meant by \u201cwho\u201d – the owner of the domain.<\/p>\n<\/blockquote>\n

EV still<\/em> doesn't give you that<\/p>\n

Not in anything that resembles a useful<\/em> metric:<\/p>\n

\n

In fact, Mozilla went even further and referenced the great work that Ian Carroll did when he registered a colliding entity name and got an EV cert for it:<\/p>\n

\n

More recently, it has been shown that EV certificates with colliding entity names can be generated by choosing a different jurisdiction. 18 months have passed since then and no changes that address this problem have been identified.<\/p>\n<\/blockquote>\n

All Ian had to do was spend $100 registering "Stripe Inc" in a different US state to the payment processor you'd normally associate the name with then another $77 on the EV cert and less than hour later, he had this newsworthy result… (https:\/\/www.troyhunt.com\/extended-validation-certificates-are-really-really-dead<\/a>)<\/p>\n<\/blockquote>\n

EVs have had no use (outside of yet-to-be-updated compliance guidelines) for years<\/strong>:<\/p>\n