EVSSL certificates are crying over "Search form issue" -Are you aware of the browser's security indicators? -
Abstract
Despite the fact that I revealed a parody song at JANOG34 and invited you to review the SSL/TLS server setting, the compliance status is not good.
In addition, it became possible to see the details of the SSL/TLS server status from the browser, in spite of buying a very expensive EVSSL certificate, there are cases where the green bar is not displayed in the browser.
In this way, poor certificates that can not fully demonstrate their abilities are crying.
In this presentation, I will introduce various circumstances concerning the security indicator recently modified in Chrome and "Search form problem" arbitrarily named by the presenter and talk about the clue to solving the problem.
I would be pleased if it helps to understand why those site is judged and designated unsafe. In addition, I would like to discuss about device U/I potential challenges in future.
Presenter:
Yuji Suga (IIJ/Cryptographic protocol Evaluation toward Long-Lived Outstanding Security Consortium)
