Hacker News Reader

> I'd say EV worked perfectly.

Ian run a legit site, not phishing, so what's perfect in revoking his EV cert and not giving back cash?

> Ian run a legit site, not phishing

He originally had a site that looked extremely similar to stripe's official website: https://news.ycombinator.com/item?id=16939094

I can't find any copies of that in any cache showing it was ever actually online, simply mocked-up photos posted to social media.

Posted by Ian himself. Why would he go to the trouble of mocking it up?

Presumably to demonstrate that a phishing site using such a certificate would be visually indistinguishable from the targeted site.

There's a difference between resolving something locally or setting up a demo for the purposes of capturing screenshots and having a website resolve on the public Internet and serve that content.

Reply on news.ycombinator.com