Yesterday Microsoft officially announced Extended Validation SSL support in IE7 at the RSA show, but already some of these new certificates started appearing few weeks ago. An Extended Validation certificate is just like a regular SSL certificate, but with stricter issuing criteria.
ssl
Delicious
Digg
Reddit
Facebook
Yahoo
Netscape
StumbleUponMore security for web forms
There are several banks that use non-SSL login pages. This does not mean they are sending your credentials in the clear, but the user has no way to tell if the login form is legit or spoofed. Alun Jones moves from the findings of Johannes Ullrich, chief research officer for the SANS Institute, to raise an alarm on this overlooked problem: how secure is the web form you are filling in?
