[143114] in cryptography@c2.net mail archive
Re: What EV certs are good for
daemon@ATHENA.MIT.EDU (John Levine)
Wed Jan 28 14:02:37 2009
Date: 28 Jan 2009 14:54:24 -0000
From: John Levine <johnl@iecc.com>
To: cryptography@metzdowd.com
In-Reply-To: <1b587cab0901262013w64f6a6f5r395e9300632af1b5@mail.gmail.com>
Cc: benl@google.com
>> I just received a phishing email, allegedly from HSBC:
>>
>> Dear HSBC Member,
>So did the link have a EV cert?
Hardly matters. HSBC has vast numbers of web servers all over the world,
some with EV certs, some without.
For example, their US customer site for deposit customers at
https://www.us.hsbc.com/ doesn't, but their site for credit cards at
https://www.hsbccreditcard.com/ does, although it's kind of hard to
tell because they tend to put you on a non-https page until you log
in.
R's,
John
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
