Everything we're told about website identity assurance is wrong
> Remember, EV only works if people change their behavior in its absence and clearly, that just doesn't happen.<p>Web browsers told me they'd try better verification markers for years. They never did. So we don't know, except to say:<p>a. the 'green bar' verification marker isn't very effective.<p>b. the 'blue tick' logo as used for UIs like <a href="https://twitter.com/troyhunt" rel="nofollow">https://twitter.com/troyhunt</a> hasn't been tried so browser makers have no data here.<p>It's a moot point: the realpolitik is browsers don't care about identity as it's not in their financial interest to do so.<p>Disclaimer: I spent 5 years of my life trying to verify the web.