,
10 tweets,
4 min read
Read on Twitter
*throws self off roof*
sectigo.com/blog/new-resea…
sectigo.com/blog/new-resea…
Enough with the specious reasoning already 🤦♂️🤦♂️🤦♂️ 
100% depends on the user. Also advises users should trust sites with EV. You should read the EV SSL Guidelines: cabforum.org/wp-content/upl…
Seriously, the introduction to this paper is based on 10 year old nonsense that as an industry we are actively trying to train out of users. Indicators in the browser do not mean you can trust a site!!! sectigo.com/uploads/resour…
ummwat?
How to make the numbers favourable to your cause:
"We collected a total of 3998 domains associated with cyberactors."
"We collected a total of 90,953 domains from the blacklists."
"there
were a total of 2,604,344 domains with EV certificates"
"We collected a total of 3998 domains associated with cyberactors."
"We collected a total of 90,953 domains from the blacklists."
"there
were a total of 2,604,344 domains with EV certificates"
I wonder if they checked to see if any browsers were interested first?
OK, serious points:
What are the numbers when you do this research with DV certs? If they come out the same then EV is proven to be pointless.
If Bad Stuff(TM) is worse on DV then then why are users not saved by the lack of EV indicator? Hint: because it doesn't matter.
What are the numbers when you do this research with DV certs? If they come out the same then EV is proven to be pointless.
If Bad Stuff(TM) is worse on DV then then why are users not saved by the lack of EV indicator? Hint: because it doesn't matter.
"We have security indicators in browser but people don't often see them or care about them, leading to them being removed. But we want more security indicators."
"emphasizing that when users see the green lock icon they feel reassured that they are accessing a safe website"
sectigo.com/uploads/resour…
sectigo.com/uploads/resour…
