All SSL Certificates are not equal. The value of SSL is protected by the strength of the validation process: Godaddy does nnot do an STRONG VALIDATION or do steps 2,3 0r 4 below.
Step 1: Verify the registrant of the domain name used in your application by verifying the information in the WHOIS database.
Steps 2 & 3: Cross-reference 2 of the following 3rd party references including: Dun and Bradstreet number, Articles of Incorporation, Business License, Tax ID, etc. Required credentials for steps 2 and 3 may vary depending on country, and if the applicant is not incorporated. The Network Solutions' validation team will contact you if additional information is required to complete the validation process.
Step 4: Verify that the SiteSafe™ SSL Certificate applicant is employed with the organization via a third-party reference.
Some SSL Certificate providers perform only the first step of the validation process (as employed by all other SSL providers) by only verifying that the applicant owns the domain name provided during certificate application. This validation step relies on the use of Domain Name Registrar details to validate ownership of a domain name and then a challenge e-mail is sent to the listed administrator of the domain name. If the challenge is met with a successful reply, the certificate will be issued. The administrator of the domain name may not always be registrant or legal contact for the domain name, but rather an agent acting on behalf of that registrant.
If an issued certificate states "Organization Not Validated," the certificate may have been issued based solely on this one validation step. The compromise of any step may endanger the message of trust and legitimacy that SSL is intended to provide to the end consumer.
We have established that:
The role of the Certification Authority is to pass trust.
Validation equals Trust