coates’s Twitter Archive—№ 20,484

g_rossolini Using a domain that doesn't not sound exactly like they're phishing, and attaching an EV cert that is *at least* harder to get than a DV cert… those are the absolute least they could do if they send me email that looks like phishing email. Yes, even if EV is "broken".