Chain Of Trust

The newest scam in the certificate business is EV SSL (Extended Validation Secure Sockets Layer) certificates. If you pay more money, then you get a more “secure” certificate.

But the reality is the certificate is no more secure then any other. All you get is a green tinted tool bar in the web browser. You only get this green tinted tool bar if your browser publisher decides to implement this feature.

This is completely backwards.

The contents of an SSL certificate is really important, it needs to be presented to the user. All web browsers I have used have given the option for the user to view the certificate and this is good. But we need more. I think the chain of trust should be displayed above the web page every time a certificate is accepted by the browser. This section should not be removable or modifiable. No more “trusting” https. No need to buy overpriced certificates.