Hacker News new | past | comments | ask | show | jobs | submit login

I don't understand the odd focus on Google/Chrome here. Apple got rid of EV long before anyone else (on mobile Safari, then later MacOS Safari). Google is following Apple.

Plus this article explains, in great detail, why EV didn't work/couldn't work. Google didn't cause that, nor did Apple. Researchers have been creating examples of EV's problems for years and the evidence has been mounting against them.




Apple, Google, Microsoft, all dislike EV for the same reason: because it is a decentralized tool for establishing identity. Identity is something they prefer to own proprietarily because a) they trust themselves more than anyone else, and b) it is lucrative.

The vast majority of examples of EV "problems" are people who misconstrue what EV is supposed to do, and then prove it can't do that thing. For example, EV was never intended to guarantee globally unique company names, so demonstrating a name collision does not actually show a problem with EV.


Why do you claim Apple dislikes a decentralized tool for establishing identity? No part of Apple's business is even remotely related to what EV certs do, and the closest they come to "identity" in general is the recently-announced "Sign In with Apple", which is personal identity for use with other services, not a public identity or anything used for a company. Apple cares about this purely for user experience, nothing else.

I'm not really sure why you're including Microsoft in here either, but I'm a lot less familiar with Microsoft's various product offerings so maybe there is some reason why they care about the public identity business.


You don't think Apple cares whether you feel safer downloading the Bank of America iOS app from their carefully curated App Store, instead of navigating to bankofamerica.com in mobile Safari?


Correct. Apple doesn't make money off of your interaction with BofA either way. They care that you have the best experience and continue to use their platform, but whether you use bankofamerica.com versus a mobile app, it doesn't matter.

Note here that using the mobile app is in no way any form of lock-in, because the exact same app will exist for Android too, and it's free, so there's no barrier to switching platforms.


The article is about Chrome, which is a monopoly-positioned product, making a change, upon where the author has stated that as such, EV is really dead. I am not sure why talking about Chrome here would be an "odd focus". When the dominant party does something, it means a lot more than when a minority party does something.

EV has issues, which the article exaggerates (Troy Hunt has amazingly good services, but absolutely terrible opinions), whilst failing to recognize that the alternative is completely useless.


> The article is about Chrome

no it's not?

The title is referencing the author's post on EV certs being dead after the change in Safari and the article quotes Google, Mozilla and Apple's reasoning for the change. Your argument should be with those statements, not a narrative you're forcing on the events.


The Safari change was mentioned in past tense (a year ago) as was Apple's statement about it, and this article is about the change in Chrome and Firefox.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: