ssl

News

• 

  Are self-signed SSL certificates as insecure as they say?

  Given the recent problems with SSL certificates provided by third-party companies, one has to wonder why we place all this trust in these vendors. We allow them to process and produce "trusted" certificates for our websites, but in the end even Google, Microsoft and state and federal governments are falling victim to fraud.

  By Cory Flynn, CEO and founder of Firewall Experts | 16 February, 2012 08:22

  Tags: certificate authority, Google, Microsoft, security, self-signed SSL certificate, ssl, SSL certificate, SSL certificate security, SSL security

• 

  SSL certificate authorities vs. ???

  With all the publicity about breaches of SSL certificate authorities and a hack that exploits a vulnerability in the supposedly secure protocol, it's time to consider something else to protect Internet transactions. If only there were something else to turn to.

  By Tim Greene | 02 November, 2011 21:33

  Tags: security, ssl

• 

  Father of SSL says despite attacks, the security linchpin has lots of life left

  SSL/TLS, the protocol that protects security of e-commerce, has taken a beating lately, with news items ranging from the violation of certificate authorities to the discovery of an exploit that beats the protocol itself.

  By Tim Greene | 12 October, 2011 01:24

  Tags: malware, networking, security, ssl, vpn

• 

  With SSL, who can you really trust?

  SSL, the encryption scheme that protects virtually all secure online transaction, requires that users rely on trusted third parties, but what if they can't be trusted?

  By Tim Greene | 19 August, 2011 06:27

  Tags: Carnegie Mellon University, networking, security, ssl, unified communications

• 

  Westpac urges PCI compliance in wake of Lush breach

  Online retailers should use a PCI-compliance payment gateway for credit card transactions, or become compliant themselves, to avoid Lush-style data breaches, says the man at Westpac tasked with securing as many as 20 million credit card accounts.

  By Rodney Gedda | 17 February, 2011 12:03

  Tags: data breaches, encryption, F5 Networks, pci, PCI compliance, Qvalent, security, ssl, westpac

• 

  Low-cost SSL proxy could bring cheaper, faster security; defeat threats like Firesheep

  Researchers have found a cheaper, faster way to process SSL/TLS with off-the-shelf hardware, a development that could let more Web sites shut down cyber threats posed by the likes of the Firesheep hijacking tool.

  By Tim Greene | 26 January, 2011 08:38

  Tags: firewalls, networking, security, ssl, vpn

• Google offers encrypted Web search option

  People who want to shield their use of Google's Web search engine from network snoops now have the option of encrypting the session with SSL protection.

  By Juan Carlos Perez | 22 May, 2010 06:33

  Tags: google search, ssl

• Benefits of Google Encrypted Search

  Google launched a new beta service this week--encrypted search using SSL (secure sockets layer) to protect searches from being snooped or intercepted while traversing the Internet. Encrypted Google search is still not entirely private, but it has benefits for individuals and businesses to ensure sensitive information is not exposed to prying eyes.

  By Tony Bradley | 24 May, 2010 04:50

  Tags: encryption, Google, ssl

• 

  VeriSign rolls out new Web site verification service

  VeriSign is introducing a certification service that confirms whether a business is legitimate and that their Web site is free of malware.

  By Jeremy Kirk | 24 February, 2010 04:30

  Tags: authentication, ssl, ssl certificates, VeriSign, VeriSign Trust Seal

• 

  UBS to deploy IBM secure banking USB device

  Banking giant UBS has started deploying a device from IBM that ensures online banking transactions aren't being interfered with by hackers.

  By Jeremy Kirk | 23 February, 2010 03:53

  Tags: IBM, security, smartcard, ssl, UBS

• 

  Botnet targets major Web sites with junk SSL connection

  More than 300 Web sites are being pestered by infected computers that are part of the Pushdo botnet, according to security researchers.

  By Jeremy Kirk | 02 February, 2010 07:46

  Tags: botnets, pushdo, security, Shadowserver Foundation, ssl, trend micro

• 

  Security pro says new SSL attack can hit many sites

  A Seattle computer security consultant says he's developed a new way to exploit a recently disclosed bug in the SSL protocol, used to secure communications on the Internet. The attack, while difficult to execute, could give attackers a very powerful phishing attack.

  By Robert McMillan | 22 November, 2009 08:17

  Tags: authentication, exploits and vulnerabilities, security, ssl

• 

  SSL flaw could have been used to hack Twitter

  A flaw in the protocol used to secure communications over the Internet could have been used to hack Twitter accounts, according to an IBM security researcher.

  By Robert McMillan | 17 November, 2009 07:47

  Tags: hack, IBM Research, ssl, twitter

• 

  More holes found in Web's SSL security protocol

  Security researchers have found some serious flaws in software that uses the SSL (Secure Sockets Layer) encryption protocol used to secure communications on the Internet.

  By Robert McMillan | 30 July, 2009 18:27

  Tags: security, ssl

• 

  Researcher shows new SSL website hack

  A researcher has found a convincing way to hack the Secure Sockets Layer (SSL) protocol used to secure logins to a range of websites, including e-commerce and banking sites.

  By John E. Dunn | 23 February, 2009 10:18

  Tags: hack, ssl