Brave-browser: Extended validation SSL certificate is not indicated in browser URL field

Created on 23 Mar 2019  路  3Comments  路  Source: brave/brave-browser

As title says, when viewing a website that has an Extended Validation SSL Certificate, Brave Browser does not indicate this in the URL bar at the top by showing the prefix of the SSL certificate. The only thing Brace Browser shows is a lock icon.

I believe this should be honored as it is a security feature that is helpful in preventing phishing and the likes. The current functionality in Brave Browser strays from the (beneficial) convention of previous browsers.

closewontfix security

Most helpful comment

@lansana EV not being shown differently than regular SSL is known and intended

Maybe @tomlowenthal or @diracdeltas can comment with more details on why, but this won't be something that we fix. The short summarized answer (from what I know) is: EV doesn't seem to add any value to end users (it's just something that costs more money)

All 3 comments

@lansana EV not being shown differently than regular SSL is known and intended

Maybe @tomlowenthal or @diracdeltas can comment with more details on why, but this won't be something that we fix. The short summarized answer (from what I know) is: EV doesn't seem to add any value to end users (it's just something that costs more money)

We have gone back and forth on this a bit in the history of Brave. Initially Brave launched without any EV indicators and defended our decision not to in https://github.com/brave/browser-laptop/issues/791. Eventually since there were a few users who weren't employed by the CA industry who asked for it, we did add EV indicators.

We launched the new Brave without EV indicators and haven't heard many complaints yet. It is fairly easy to change so we could reconsider again.

Was this page helpful?
0 / 5 - 0 ratings