Using Firefox on Santander, security padlock

roxy28

When logging in to online banking i get the grey padlock in the address bar ok.
Other banking sites i use the padlock turns green for extended v 3, is the grey padlock the norm for santander.

pmjenkins

I get the same results as you. The following explanation might be of interest:-

https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure

roxy28

pmjenkins wrote: »

I get the same results as you. The following explanation might be of interest:-

https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure

Yes seen that, would feel better if the padlock on Santander turned green.

zzzt

It's just as secure as the green padlock. Just make sure you never follow links in emails. Always type the domain yourself or use a bookmark.

The extended validation certificates are like supermarket premium products. They're a way for certificate authorities to make more money, since competition drove down prices, but in reality they offer the same encryption strength as the regular certificates and don't add anything if you trust that the person who owns santander.co.uk is Santander (which it is).

bonjan

The green padlock means the bank uses an extended validation certificate.

As per article in Wikipedia: "Certificates issued by a CA under the EV guidelines are not structurally different from other certificates (and hence provide no stronger cryptography than other, cheaper certificates)".

So assuming no one has fooled Entrust (issuers of Santander's certificate) to obtain a certificate under Santander's name (that is, pretending to be Santander without being Santander, quite unlikely for a bank), you're equally safe.

Current certificate expires on 1st of May 2015, let's see if they get an EV certificate at the renewal.

Futuristic

There is no "increase" in "security" when they have a green bar, you are equally safe in which the data is encrypted.

Companies may pay more to get a green bar to show they may show they are more secure than others when they're just as same as another using one without. Or in case of bank logins to visibly show their company name on the green padlock to re-assure users.

roxy28

Ok thanks for the reply