EV https certificates for the Air forum?

[retiredpilot 6]

I just noticed that Air doesn't seem to be using EV certificates while logged in to the forums here.  My FF browser shows https but I don't see EV, which would turn the lock indicator GREEN.  I haven't tried logging in from outside the vpn tunnel but that shouldn't make a difference.

 

Security wise; I would think this is one forum that would be a target for any "man in the middle" interception attempts.  I was reading about this on Steve Gibson's site and it does make sense to me.  I know my tunnel payload is encrypted but would additional EV certification make sense here?

[Staff 9972]

Hello,

 

https://en.wikipedia.org/wiki/Extended_Validation_Certificate#Criticism

 

Anyway we'll keep this option open.

 

Kind regards

[retiredpilot 6]

Staff,

 

Thank you for that.  It really makes sense.  I guess the only way to know for sure is to quickly open my browser and verify the SHA1 fingerprint, which is very easy to do.  About two seconds.  This quick check would virtually eliminate any MITM concerns for https.

 

I notice that your current certificate is good through 5-31-2014.  Am I correct in assuming that the forum certificate fingerprint should stay "static" until that time?  I am asking because I am assembling a list of fingerprints for the sites where I am active and want "assured" secure connections.

 

Would you mind pasting your certificate's SHA1 fingerprint here so we have an officially established value for it?

 

The Air system is such a great network of server banks.  I have to say that I don't remember ever getting dropped and the speeds are amazing.  Great work!!