> What if someone hijacks a domain?
But that's a registrar problem, not a "proof that this connection comes from someone who controls that domain" problem. These aren't EV certificates.
But that's a registrar problem, not a "proof that this connection comes from someone who controls that domain" problem. These aren't EV certificates.
Otherwise https only gurantees that you're actually talking to the domain you see in the URL, not who that domain belongs to.