> Heads up: I work for a company that speeds up the background checks used for EV.
How much faster? The one time I've gotten an EV cert it took a couple hours to get verified. Didn't seem too long at all and compared to the time to plan the swap out of the cert in production, the wait was a non issue.
The verification itself was a joke though. It was basically just a phone call asking "Are you X? Ok great! Here's your cert!"
> Tying real world identities to public keys is very much a part of crypto.
Joe User isn't going to look at the details and validation chain of a certificate. The whole idea of the green bar for "more trusted" is a scamola by the cert providers as they saw the writing on the wall for their margins going to zero for domain validated ones (granted they saw it early enough to get traction on it!).
> The verification was basically just a phone call asking "Are you X? Ok great! Here's your cert!"
Congratulations, you have an active registered company that was already well known to qualified third parties. Before that phone call happens, the CA has to verify your existence and status by government records and a qualified third party. There are additional steps for certain company structures. They don't just call you and you get the cert - and people are often rejected.
> Joe User isn't going to look at the details and validation chain of a certificate.
Nobody is expecting users to look at the cert details or verification chain. Just the name in middle of the address bar.
How much faster? The one time I've gotten an EV cert it took a couple hours to get verified. Didn't seem too long at all and compared to the time to plan the swap out of the cert in production, the wait was a non issue.
The verification itself was a joke though. It was basically just a phone call asking "Are you X? Ok great! Here's your cert!"
> Tying real world identities to public keys is very much a part of crypto.
Joe User isn't going to look at the details and validation chain of a certificate. The whole idea of the green bar for "more trusted" is a scamola by the cert providers as they saw the writing on the wall for their margins going to zero for domain validated ones (granted they saw it early enough to get traction on it!).