Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Show certificate type and (if OV or EV cert) organization #55

Open
raph431 opened this issue Nov 10, 2023 · 3 comments
Open

Show certificate type and (if OV or EV cert) organization #55

raph431 opened this issue Nov 10, 2023 · 3 comments

Comments

@raph431
Copy link

raph431 commented Nov 10, 2023

I would love to be able to easily differentiate between DV and other types of certificates.
IMO DV certificates are far too easy to obtain nowadays, therefore I'd love to see the certificate type in the popup.
And if it is an Organization or Extended Validation certificate, why not show the name of the organization as well.

Thanks a lot for this add-on. It helps a lot.

@Nothing4You
Copy link
Contributor

Note that this was intentionally removed from browsers: https://www.bleepingcomputer.com/news/software/chrome-and-firefox-changes-spark-the-end-of-ev-certificates/

EV certificates do not make websites more secure.

@raph431
Copy link
Author

raph431 commented Nov 11, 2023

Thank you for the link. While this is interesting, I dare to disagree. In order to "hack" a website with a DV certificate, a breach of the nameserver is sufficient. For a website with an EV certificate, one has to steal the key from the webserver. While it might be possible to register a company with the same name and get an EV certificate for that company, I don't think any of this is possible to do anonymously. Who would identify to register a company in order to defraud people?

@matthew119427
Copy link

I also think adding this distinction would make sense for the utility of the extension.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants