Hacker News Reader

login.gov is using "Let's Encrypt", which is kinda awesome :)

Should they have used an EV certificate?

Nah. DV gives you the same cryptographic guarantees, but with the benefit of 100% automation.

To add to this, a US government site does not need this, because only the US government site can register a .gov domain.

They can be taken over.

In which case EV wouldn't get you anything, right (since presumably it would be verified and issued before the site was taken over)?