Talking about SSL certificates, there are 3 types.
- Basic validation
- Business validation
- Extended Validation
- The first one checks only if a domain name is registered for the user which issues the certificate.
- The second one does also requires information about the company.
The last one does check the physicial location of a company.
My question here, does the 2nd and 3rd option makes the connection more secure? Because our users know the domain is ours (100% verified with them) and they all contain a 128-bit encryption.
Will the 1st certificate be enough for us, or do you recommend the 2nd? I consider number 3 an option for banks.