Extended Validation SSL ::

Over the years we’ve all been told to look for the golden padlock to make sure you were on a “secure” connection. Well unfortunately, that is no longer true. Whenever you’re about to send sensitive information via the web, you now need to make sure you see the green address bar. Why you ask? Because now the bad guys have golden padlocks too. Have you heard the word “phishing”, “phishing attack”, or “phishing site” within the last year?

This is a type of internet fraud where people with bad intentions will create a fake website that looks identical to one’s we’ve all been on and seen before. Once they lure a potential victim to the site, they are after credit card and banking info, login information, and other personal information that you wouldn’t want them to have.

What does that have to do with a green address bar? Everything!

We ask you, what good is encrypting your information if you’re sending it to a crook anyway?

Read more...

• Fairly strick guidelines


• All SSL's issued were of the organization validated (OV) variety


• Requesting business had to prove operational/organizational existence


• Encrypts information while it was in transit, identity of certificate holder verified to a certain degree


• No domain validated SSL (DV) or extended validated SSL (EV) available

• Market pressures lead to some Certificate Authorities (CA’s) offering DV SSL’s


• Extremely loose guidelines


• The issuing Certificate Authority only verifies that the requestor has an email address @thatdomain.com before issuing the SSL and "golden padlock"


• Rapid rise in the use of DV SSL by fraudulent websites


• DV SSL provides a "secure" (encrypted) connection as well as the golden padlock, which enhance websites image as a legitimate site


• Encypts information while in transit
  -OV SSL and DV SSL available, no extended validation (EV) SSL

• Meteoric rise in the amount of phishing sites created by fraudsters leads to the development of Extended Validation SSL (EV) by the Certificate Authority (CA) and Browser Forum (CAB Forum or CA/B Forum)


• Very strict criteria must be met by requesting party before Extended Validation SSL is issued


• Very strict issuance guidelines must be met by the Certificate Authority (CA) -CA's are audited by third party to ensure compliance


• Extended Validation SSL (EV) set to combat the meteoric rise in the amount of phishing site created by fraudsters


• Encrypts information while in transit, identity of requesting party verified


• DV SSL, OV SSL, and EV SSL available; DV SSL and OV SSL provide golden padlock, EV SSL provides "the green address bar"

• The public cannot rely solely on the golden padlock to provide required protection against phishing attacks and fraud


• High security internet browsers are now equipped with an anti-phishing filter which will recognize EV SSL certificates and will be indicated with a green address bar


• Extended Validation SSL encrypts information while in transit, also provides the green address bar which means identity of SSL holder verified


• The green address which is fast becoming the only true indicator of WHO the information is going too