Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There's different grades of validation, some of which audit your organization's legal structure to make sure you are actually a legitimate company. Let's Encrypt does domain validation, which validates that the entity it is issuing a certificate for has control of the domain name.

In practice, I doubt most people that use web browsers actually know the difference. They just see a green lock and assume everything is good to go.



Doesn't IE (or Edge?) show a big green bar if it's one of the highly verified certificates?


I think all the browsers do. I the UI had the name of the organization too.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: