Extended Validation Certificates Certifiably Useless

Upcoming Events

Cloud Connect March 16-18

Comprehensive thought leadership for executives, IT professionals and developers. Topics include: the ROI, cost and economics of on-demand computing; Migration strategies to move from on-premise to cloud-based IT; Vertical cloud specialization, tailoring features and architectures to specific applications, industries, and customer ecosystems

Email Print Share

0 Comments

Extended Validation Certificates Certifiably Useless

Posted by Mike Fratto, Editor on February 16, 2007

A recent study shows that a new antifraud mechanism does little to help users identify phishing sites.

Extended Validation certificates are being touted by the CA/Browser Forum--an association of prominent certificate authorities and browser developers--as a means to help users identify fraudulent sites and thwart phishing. EV certificates require more stringent identification of a domain owner, and the presence of an EV certificate lets browsers provide visual clues to users, such as a green address bar in IE7.

But in a Stanford University study, EV certificates did not help users identify common phishing attacks. The only real information a user will get from an EV certificate is that a particular Web site ponied up extra cash to get one. --Mike Fratto, mfratto@nwc.com

0 Comments

Add Comment

Add Your Comment:

State of Enterprise Storage

Continuing to throw precious resources at escalating storage and bandwidth demand isn't a strategy, it's a recipe for disaster. Diverse drivers - from environmental concerns to regulation to data security to business continuity - mandate a new path. Are you ready?

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

Deduplication storage is quickly becoming the standard for disk-based backup and nearline storage use in enterprise data centers across many industries. Download this paper which examines and quantifies the costs and benefits of backup with deduplication.

VMware Data Backup and Recovery Best Practices

Download this guide to learn best practices for architecting a backup/recovery/DR approach for VMware using Data Domain storage, regardless of which backup software or scripts are involved.