Fear of identity theft will keep some shoppers off the Net and in brick-and-mortar stores this holiday season. That's prompted the Merchant Risk Council, whose mission is making the Internet "a preferred place to shop and sell," to recommend that e-commerce sites adopt extended validation certificates in place of SSL certificates. Unfortunately, the recommendation falls flat. Extended validation certificates offer little over SSL certificates issued by certificate authorities. When you purchase an SSL certificate, a certificate authority typically will check to ensure that you are the authorized person requesting the certificate for the domain. With extended validation certificates, the certificate authority is supposed to further verify the company is an actual business. If the business is verified, the EV certificate is issued. Internet Explorer and Opera browsers change the address bar based on that: green for a valid EV certificate, red for invalid. Otherwise, it stays neutral.
展开▼
机译：对身份盗用的恐惧将使这个购物季节的网购者和实体店中的一些购物者望而却步。这促使商业风险委员会（Merchant Risk Council）的任务是使互联网成为“首选的购物和销售场所”，建议电子商务网站采用扩展的验证证书代替SSL证书。不幸的是，建议不成立。扩展验证证书所提供的证书颁发机构提供的SSL证书很少。当您购买SSL证书时，证书颁发机构通常会检查以确保您是请求域证书的授权人。使用扩展的验证证书，证书颁发机构应该进一步验证该公司是一家实际企业。如果业务通过验证，则颁发EV证书。 Internet Explorer和Opera浏览器会基于此更改地址栏：绿色表示有效的EV证书，红色表示无效。否则，它将保持中立。
展开▼
