I recently found myself wondering, why big sites such as Facebook, Google, Github etc usually aren't using EV SSL certificates? It probably would make non-technical users trust the website more and perhaps make them more aware of phishing (eh, I don't believe in that myself, but it's still nice to dream...), and it's not like they can't afford it.
Ask HN: Why most big websites aren't using EV SSL?
1–2 of 2 posts
Re: Ask HN: Why most big websites aren't using EV SSL?
#2Scott Helme, a security researcher has an article on EV certificates and some of the issues with them in an article from December 2017 (https://scotthelme.co.uk/are-ev-certificates-worth-the-paper...). There was some discussion on this when it was originally submitted to HN at https://news.ycombinator.com/item?id=15850837.
Adam Caudill also has some insight here: https://adamcaudill.com/2017/04/09/looking-value-ev-certific...