Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Whether the CA verifies identity or not is irrelevant. Since the end user does not see the certificate they are all functionally equivalent.

And yes, the actual quality of the identity check is debatable but since nobody cares the utility of it is zero.

For example- when was the last time you checked the certificate details of a web site? Have you ever left a site because you felt the certificate didn't verify identity?



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: