Extended Validation Certificates Are Dead
I&#x27;m seeing a lot of discussions about financial and specifically banking sites here. For the average user, there&#x27;s no reason or need to phish a particular financial site.<p>One of our engagements sent users to a site we just made up, and asked for user credentials for a site they had never heard of in order to access cat videos. In most cases, we were given valid domain credentials. I&#x27;d bet money a high percentage of those were also banking credentials. What good would an EV cert at the bank do for this?