What EV certs are good for
John Levine
johnl at iecc.com
Wed Jan 28 09:54:24 EST 2009
>> I just received a phishing email, allegedly from HSBC:
>>
>> Dear HSBC Member,
>So did the link have a EV cert?
Hardly matters. HSBC has vast numbers of web servers all over the world,
some with EV certs, some without.
For example, their US customer site for deposit customers at
https://www.us.hsbc.com/ doesn't, but their site for credit cards at
https://www.hsbccreditcard.com/ does, although it's kind of hard to
tell because they tend to put you on a non-https page until you log
in.
R's,
John
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com
More information about the cryptography
mailing list