Story.
The story is a little vague about exactly where the boundary will be drawn between safe and unsafe browsers, but it could be as strict as "Any browser that doesn't use EVSSL will not be allowed on PayPal". And since Safari does not currently support it, even with a plug-in (and Firefox requires a plug-in), that could be seen as possible collusion with Microsoft if it's as bad as that....
The story is a little vague about exactly where the boundary will be drawn between safe and unsafe browsers, but it could be as strict as "Any browser that doesn't use EVSSL will not be allowed on PayPal". And since Safari does not currently support it, even with a plug-in (and Firefox requires a plug-in), that could be seen as possible collusion with Microsoft if it's as bad as that....
From:
no subject
Personally, I think SSL validation is sufficient.There is nothing stopping a phishing site from obtaining a valid EVSSL certificate, and thus getting that touted green address bar. Just another over-priced Feel Good product with insignificant added value.
From:
no subject
From:
no subject
From:
no subject