Исходное сообщение
"В Chrome 77 будет прекращена маркировка сертификатов с расши..." Отправлено Аноним, 13-Авг-19 10:16
И до этих изменений для большинства пользователей это выглядит одинаково. Им пофиг. Деньги тратили владельцы сайтов, которые думали что пользователи обращают на это внимание. И уже много лет EV умирают, и от пропажи видимости в браузерах, и от осознания бесполезности и слоупочности обновления сертификатов. И те кто продвигали нужность EV, сами использовали DV, лол. https://www.troyhunt.com/extended-validation-certificates-ar.../ > Which brings me to the second point: certificate renewal should be automated and that's something that you simply can't do once identity verification is required. DV is easy and indeed automation is a cornerstone of Let's Encrypt which is a really important attribute of it. I recently spent some time with the development team in a major European bank and they were seriously considering ditching EV for precisely this reason. Actually, it was more than that reason alone, it was also the risk presented if they needed to quickly get themselves a new cert (i.e. due to key compromise) as the hurdles you have jump over are so much higher for EV than they are DV. Plus, long-lived certs actually create other risks due to the fact that revocation is broken so iterating quickly (for example, Let's Encrypt certs last for 3 months) is a virtue. Certs lasting for 2 years is not a virtue, unless you're coming from the perspective of being able to cash in on them...

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> И до этих изменений для большинства пользователей это выглядит одинаково. Им пофиг. > Деньги тратили владельцы сайтов, которые думали что пользователи обращают на это > внимание. И уже много лет EV умирают, и от пропажи видимости > в браузерах, и от осознания бесполезности и слоупочности обновления сертификатов. И > те кто продвигали нужность EV, сами использовали DV, лол. https://www.troyhunt.com/extended-validation-certificates-are-dead/ >> Which brings me to the second point: certificate renewal should be automated and that's something that you simply can't do once identity verification is required. DV is easy and indeed automation is a cornerstone of Let's Encrypt which is a really important attribute of it. I recently spent some time with the development team in a major European bank and they were seriously considering ditching EV for precisely this reason. Actually, it was more than that reason alone, it was also the risk presented if they needed to quickly get themselves a new cert (i.e. due to key compromise) as the hurdles you have jump over are so much higher for EV than they are DV. Plus, long-lived certs actually create other risks due to the fact that revocation is broken so iterating quickly (for example, Let's Encrypt certs last for 3 months) is a virtue. Certs lasting for 2 years is not a virtue, unless you're coming from the perspective of being able to cash in on them...
	Введите код, изображенный на картинке: