Linked Questions

3 votes
2 answers
5k views

"Premium SSL" vs "Stanard SSL" certificates - Any reason why I would want a "Premium SSL"? [duplicate]

Possible Duplicate: What are the advantages of EV Certificate? besides the green URL bar and free security scan and whatnot. Our website does NOT accept any personal info other than email ...
Tom Geee's user avatar
5 votes
1 answer
31k views

Grey vs Green padlock in address bar - technical difference [duplicate]

What is a technical difference between "grey padlock" and "green padlock" in URL bar in browsers? As an example we can take: Green padlock: Bank of America Grey padlock: Google Search Both of them ...
boleslaw.smialy's user avatar
4 votes
2 answers
2k views

What is the difference between EV-SSL certificates and Normal SSL certificates? [duplicate]

Recently while looking at several banking URLs I can see the domain name with security certificate at address bar and normal locker security certificate at address bar. Have a look at the screenshots: ...
BlueBerry - Vignesh4303's user avatar
1 vote
1 answer
237 views

What causes the descriptive text in HTTPS lock icons? [duplicate]

Some websites have descriptive text next to their lock icon. While many other websites (like Google) simply display a simple green lock icon. What causes this? And does this text have a special ...
wafflecat's user avatar
  • 111
1 vote
0 answers
64 views

Why doesn't the most powerful/powerful sites on the internet use Extended Validation SSL certificates? [duplicate]

Why does some of the biggest internet companies not use an Extended Validated certificate which makes the address bar would be green and more secure? I have noticed that Facebook, Google, Amazon the ...
The Artist's user avatar
2 votes
0 answers
47 views

What's the difference between the certificate used for namecheap.com and the certificate used for stackexchange.com? [duplicate]

I'm in the process of purchasing a certificate for my web app, and I'm getting a little confused by all the different certificates out there. I know that an EV certificate gives me the "green address ...
Matt Spinks's user avatar
87 votes
5 answers
39k views

Are all SSL Certificates equal?

After running a few tests from Qualsys' SSL Labs tool, I saw that there were quite significant rating differences between a GoDaddy and VeriSign certificate that I have tested against. Are all SSL ...
Kyle Rosendo's user avatar
  • 4,055
15 votes
6 answers
2k views

What's the point of the CA?

So a Certificate Authority certifies that a website corresponds to a given organization. Why is this necessary? When I interact with a business or organization, I do it one of a couple ways: I ...
Christopher King's user avatar
14 votes
3 answers
7k views

How can end-users detect malicious attempts at SSL spoofing when the network already has an authorized SSL proxy?

I'm working on one client's network where they have enabled HTTPS authority spoofing on their proxy. This allows them to effectively perform a man-in-the-middle attack to decipher all outgoing ...
Benoît's user avatar
  • 243
3 votes
8 answers
2k views

Explain SSL advantages for e-commerce to layperson?

I need to explain why having a SSL certificate is a good investment for an e-commerce. How do I do this when the other person is a intelligent business owner but not that tech smart?
Vlad The Improbable's user avatar
5 votes
3 answers
2k views

Is a company website secure against sslstrip if it doesn't use ssl on homepage but ssl everywhere else?

Most ecommerce websites use SSL/TLS when you want to log. But most have homepage using http only. Is it enough to have SSL/TLS on login page and logged page to prevent sslstrip ?
user310291's user avatar
  • 1,403
5 votes
1 answer
3k views

how do extended validation X.509 certs work?

https://www.forumatic.com/ uses an extended validation cert. wikipedia.org's entry on extended validation certs says that a cert is known to be an extended validation cert if the OID in the ...
compcert's user avatar
  • 671
1 vote
1 answer
138 views

If You Use Secure Sites with Extended Validation Certificates How Much Do You Still Have To Worry About Phishing Sites Impersonating Them?

Was mulling over the issue of protecting users from password-stealing phishing sites when an interesting question that hadn't occurred to me before popped into my head: Let's say that I decide to ...
mostlyinformed's user avatar