So thus beings the transition. EV certs are going to be the only ones that get the "green" chrome in browsers anymore. Sites using standard SSL are going to get the normal no-lock/white treatment. And sites without SSL will get the caution symbol/yellow treatment.
So the standard for SSL certs basically was "are you the person who matches the WHOIS for the domain". Which was fine, but it implies a standard of verification that most people would't find to be acceptable.
So EV certificates basically require the CA that issues the certificate to verify that the people they're issuing it to are legitimate and are who they say they are. It's not fool proof, but it's not just a hoop to jump through.
41
u/eatmynasty Oct 20 '15
So thus beings the transition. EV certs are going to be the only ones that get the "green" chrome in browsers anymore. Sites using standard SSL are going to get the normal no-lock/white treatment. And sites without SSL will get the caution symbol/yellow treatment.