On: Ask HN: What's the best company to buy an SSL cert...

[michaelbuckbee]

To the point of EV certs, if you haven't checked in a while the browser vendors have _really_ started to de-emphasize non EV (standard certs).

Here's a visual comparison I put together:

https://www.expeditedssl.com/pages/visual-security-browser-s...

How you feel about this probably centers around whether you view SSL more as a cryptographic means of securing a connection (stopping traffic snooping) or if you view the SSL+Browser iconography as a means of site identification (stopping phishing attacks).

[citadelgrad → michaelbuckbee]

Thanks for sharing this. It's really interesting to see exactly how each browser handles both standard and EV certificates.

[xenophonf → michaelbuckbee]

I came to this discussion to dismiss the technical relevance of EV certificates, but frankly, it never occurred to me that iconography could mitigate a phishing attack. That's interesting.