News

• Are self-signed SSL certificates as insecure as they say?

  By Cory Flynn, CEO and founder of Firewall Experts | 16 February, 2012 08:22

  Given the recent problems with SSL certificates provided by third-party companies, one has to wonder why we place all this trust in these vendors. We allow them to process and produce "trusted" certificates for our websites, but in the end even Google, Microsoft and state and federal governments are falling victim to fraud.

• SSL certificate authorities vs. ???

  By Tim Greene | 02 November, 2011 21:33

  With all the publicity about breaches of SSL certificate authorities and a hack that exploits a vulnerability in the supposedly secure protocol, it's time to consider something else to protect Internet transactions. If only there were something else to turn to.

• Father of SSL says despite attacks, the security linchpin has lots of life left

  By Tim Greene | 12 October, 2011 01:24

  SSL/TLS, the protocol that protects security of e-commerce, has taken a beating lately, with news items ranging from the violation of certificate authorities to the discovery of an exploit that beats the protocol itself.

• With SSL, who can you really trust?

  By Tim Greene | 19 August, 2011 06:27

  SSL, the encryption scheme that protects virtually all secure online transaction, requires that users rely on trusted third parties, but what if they can't be trusted?

• Low-cost SSL proxy could bring cheaper, faster security; defeat threats like Firesheep

  By Tim Greene | 26 January, 2011 08:38

  Researchers have found a cheaper, faster way to process SSL/TLS with off-the-shelf hardware, a development that could let more Web sites shut down cyber threats posed by the likes of the Firesheep hijacking tool.

• Google offers encrypted Web search option

  By Juan Carlos Perez | 22 May, 2010 06:33

  People who want to shield their use of Google's Web search engine from network snoops now have the option of encrypting the session with SSL protection.

• Benefits of Google Encrypted Search

  By Tony Bradley | 24 May, 2010 04:50

  Google launched a new beta service this week--encrypted search using SSL (secure sockets layer) to protect searches from being snooped or intercepted while traversing the Internet. Encrypted Google search is still not entirely private, but it has benefits for individuals and businesses to ensure sensitive information is not exposed to prying eyes.

• VeriSign rolls out new Web site verification service

  By Jeremy Kirk | 24 February, 2010 04:30

  VeriSign is introducing a certification service that confirms whether a business is legitimate and that their Web site is free of malware.

• UBS to deploy IBM secure banking USB device

  By Jeremy Kirk | 23 February, 2010 03:53

  Banking giant UBS has started deploying a device from IBM that ensures online banking transactions aren't being interfered with by hackers.

• Botnet targets major Web sites with junk SSL connection

  By Jeremy Kirk | 02 February, 2010 07:46

  More than 300 Web sites are being pestered by infected computers that are part of the Pushdo botnet, according to security researchers.

• Security pro says new SSL attack can hit many sites

  By Robert McMillan | 22 November, 2009 08:17

  A Seattle computer security consultant says he's developed a new way to exploit a recently disclosed bug in the SSL protocol, used to secure communications on the Internet. The attack, while difficult to execute, could give attackers a very powerful phishing attack.

• SSL flaw could have been used to hack Twitter

  By Robert McMillan | 17 November, 2009 07:47

  A flaw in the protocol used to secure communications over the Internet could have been used to hack Twitter accounts, according to an IBM security researcher.

• More holes found in Web's SSL security protocol

  By Robert McMillan | 30 July, 2009 18:27

  Security researchers have found some serious flaws in software that uses the SSL (Secure Sockets Layer) encryption protocol used to secure communications on the Internet.

• Researcher shows new SSL website hack

  By John E. Dunn | 23 February, 2009 10:18

  A researcher has found a convincing way to hack the Secure Sockets Layer (SSL) protocol used to secure logins to a range of websites, including e-commerce and banking sites.

• F5 adds support for iPhones over its SSL VPN tunnels

  By Tim Greene | 08 October, 2008 08:30

  F5 Networks has issued a new version of its FirePass software so it can apply group access policies to mobile devices as the log-in to SSL VPNs.