Hacker News Reader

Doesn't work very well if you're on a Google site: http://i.imgur.com/1JMASfH.png

This was posted the other day, checking its green isn't enough.

https://www.xudongz.com/blog/2017/idn-phishing/

Edited: you're right I thought you meant just check its https.

That is an ordinary DV cert. GP is talking about EV certs, which in theory assures you that Apple, Inc. specifically owns the domain name you're on, not just the operator of the server.

This is very easy to miss, even as a technical user. Still good advice.

Google doesn't use EV certs.