SSL vs EV SSL certificate

[mryang]

Hi,

My site is currently using an SSL certificate from thawte, so its a good enough one, however it doesn't give the green browser bar - we are due to renew at the end of this month so I am wondering if it is worth upgrading to the EV SSL certificate and also if there are any disadvantages in using the EV SSL certs?

[Dubbya]

Originally Posted by mryang

Hi,

My site is currently using an SSL certificate from thawte, so its a good enough one, however it doesn't give the green browser bar - we are due to renew at the end of this month so I am wondering if it is worth upgrading to the EV SSL certificate and also if there are any disadvantages in using the EV SSL certs?

Personally, I think it's a load of hype. In my experience, most users don't know the difference between one or the other, don't realize that "https://" means they're in a secure browser session, don't know what the lock in the bottom toolbar indicates and don't understand the color change in the address bar background either.

If your certificate is valid and working fine as it is, why spend the extra cash?

I'd want to see some legitimate data before I felt compelled to take the plunge.

[advancedmerchant]

I think that Verisign is trying to make a ton of $$ with the EV cert. They are very rare, and even Wells Fargo and Amazon.com do not have them. When you see either:

1) The big e-tailers using them -or-
2) Verisign lowers the price to something reasonable

That would be the time to upgrade.

[able]

I like the concept but I agree with advancedmerchant I'm not going to spend the extra money until a big site is using them

[kgun]

Why not use OpenSSL: The Open Source toolkit for SSL/TLS. My Norwegian hoster says that that is good enough and sometimes good enough is best.

Note that open sertificates and ID's are accepted by professional companies.

Here on Tv: Products like Digital Cameras, Sunglasses, etc. etc. are compared. It is remarkable how often the product with the lowest (difficult to beat zero) or middle price is ranked highest.

[able]

Open SSL is a library to impliment the protocol, most apache based sites will be using Open SSL.

However you still need certificates regardless of what software you use to handle the https protocol.

[kgun]

I know that. Was unsure if he knew the OpenSSL concept.

Link EV SSL Certification Growth: Netcraft: Extended Validation SSL Certificates now 1 Year Old

[SSL Certificate]

it will take some time, but I think these certificates will eventually become VERY important, IF the certificate-issuers take verification seriously.

The whole idea behind this is that in order to get one of these, your identify is verified. You have to prove that you are who you say you are.

I think at some point, consumers will refuse to make monetary tranactions with a site if they do not get the green bar. Why on earth would you send money to somebody whose identity you cannot verify?

To me what really matters with a ssl cert is that the data is encrypted