Extended Validation: What’s the Score?

While a standard secure socket layer certificate is often enough for many businesses, the extra criteria used to grant a Symantec EV SSL certificate can be appealing for others. For an average online user, if hoping to buy something from an ecommerce website, the presence of the iconic padlock and the https:// protocol would be enough for them to go ahead and click the “buy” button, but, for others, a little more reassurance is needed.

Savvy computer users will know that, even with a SSL certificate, security isn’t 100% guaranteed. Many certificate authorities are less than reliable and lax validation processes can mean that some unscrupulous businesses slip through the cracks. While reputable certificate authorities such as Symantec operate under rigorous criteria, others don’t, meaning that fraudsters can apply for, and be granted, SSL certificates and use them as a foundation for malicious attacks and compromise.

Extended Validation is available for this very reason, as this kind of certificate covers angles that a standard SSL can’t reach. As an applicant for an EV SSL, a business owner would have to follow strict criteria to be considered. Even if then an applicant is considered, more thorough examination into the identification of the business owner, the business and the domain ensures the absolute authenticity of the site, giving the utmost in confidence and peace of mind to prospective customers.

The result is a fool-proof SSL certificate that is supported by all major web browsers and mobile devices, meaning that whatever customers use to browse the site, they will know it can be trusted. An extra visual indicator, the green address bar, helps to confirm that presence of an EV SSL – irrefutable proof that a business cares.

Of course, this extra security comes at a price, with Extended Validation certificates being some of the most expensive on the market. That being said, it’s a worthy investment for any business who takes their customers seriously and should be considered by anyone who will be handling sensitive data through their website.