Everything we're told about website identity assurance is wrong
> Remember, EV only works if people change their behavior in its absence and clearly, that just doesn't happen.Web browsers told me they'd try better verification markers for years. They never did. So we don't know, except to say:a. the 'green bar' verification marker isn't very effective.b. the 'blue tick' logo as used for UIs like https://twitter.com/troyhunt hasn't been tried so browser makers have no data here.It's a moot point: the realpolitik is browsers don't care about identity as it's not in their financial interest to do so.Disclaimer: I spent 5 years of my life trying to verify the web.