(1 votes, average: 5.00 out of 5)

Airline Wi-Fi Provider Gogo Has Been Intercepting User Traffic

If you have ever flown on a US airline, chances are you have seen an advertisement for an in-flight Wi-Fi service provided by Gogo. While Gogo is certainly appealing to most travelers in this day and age, a revelation has come to light recently about this service that you should probably be aware of.This past week, Adrienne Porter Felt, a security engineer at Google, discovered that Gogo was using a fraudulent certificate in place of Youtube.com’s real SSL certificate. The certificate was Read more [...]

(4 votes, average: 5.00 out of 5)

4 & 5 Year SSL Certificates Being Discontinued in 2015

On March 1st, 2015, The SSL Store™ will discontinue offering SSL certificates with validity periods of 4 and 5 years. This is in accordance with new guidelines set forth by the Certificate Authority/Browser (CA/B) Forum, the governing body of the SSL industry. This update will affect all SSL certificates in the industry, including the entire product catalogs of Symantec, Comodo, Thawte, GeoTrust, and RapidSSL. (EV certificates are already limited to a maximum of two years so they are not affected Read more [...]

(4 votes, average: 5.00 out of 5)

10 Important Factors That Make Symantec™ SSL Certificates #1

Symantec™ Corporation is a US-based internet security & technology company, founded by Gary Hendrix in 1982. It’s a global and publically traded company (NASDAQ: SYMC) dealing with many different sectors of the security industry, such as; anti-virus applications, data storage & backup solutions, SSL certificates and other website security solutions. As per W3Techs’s (Web Technology Surveys) report, Symantec™ Corporation is the top Certificate Authority (CA) with the largest market Read more [...]

(3 votes, average: 5.00 out of 5)

Limited POODLE Attack Resurfaces in TLS

Back in October, we published an extensive article about an attack called POODLE that affected old versions of the SSL protocol (specifically, SSL 3.0). This attack had the potential to affect nearly 98% of the Internet, as many servers still supported this older version of the protocol.But now it has been revealed that POODLE is back, this time with the ability to affect even the newest version of the protocol1. Any time we visit the topic of SSL protocol attacks, we should remember this brief Read more [...]

(6 votes, average: 4.33 out of 5)

SAN/UCC SSL Certificates Will Not Work for Internal Domain Names after November 1, 2015

Are you shocked after reading the headline? Yes, it is true that ALL (SAN/UCC) SSL Certificates will not work for internal server domain names from 1st November, 2015.As per the CA/Browser Forum (CA/B), the regulatory body that governs the SSL industry, one of the new changes is the elimination of certificates for internal names. This change makes it impossible to obtain a publicly trusted certificate for any host name that cannot be externally verified as owned by the organization that is requesting Read more [...]

(37 votes, average: 3.16 out of 5)

SSL 3.0 POODLE Vulnerability Has Wide Ranging Effects

What is “POODLE”? POODLE is an acronym for a newly discovered vulnerability in a specific version of the SSL protocol. POODLE requires an “active” attacker, meaning there must be another ‘bad’ computer intercepting messages between the client and server. Ultimately, the vulnerability allows the attacker to decode messages encrypted with SSL v3.0 (the specific, and only, version of the protocol affected).SSL v3.0 is an old version of the SSL protocol, a very old version - from the Read more [...]

(5 votes, average: 4.20 out of 5)

SSL 3.0 POODLE Vulnerability Has Wide Ranging Effects

Thai Duong, Bodo Moller and Krzysztof Kotowiczis, three of Google’s security researchers, recently found a vulnerability in SSL 3.0, which has been referred to as POODLE (Padding Oracle on Downgrade Legacy Encryption).Per the latest Net Craft survey, nearly 97% of web servers in the world are likely to be vulnerable to POODLE attacks. The POODLE vulnerability affects the SSL certificate version 3.0 (SSLv3). It allows a man-in-the-middle attacker to access confidential information from the SSL Read more [...]

(30 votes, average: 2.03 out of 5)

Step-By-Step Guide for Installing an SSL Certificate on Cisco ASA 5510

Cisco’s Adaptive Security Appliance (ASA) was introduced in May 2005. It is an effective combination of the functionalities of Cisco PIX, IPS product lines and VPN 3000. In this post, we have put together a step-by-step guide for installing an SSL certificate on Cisco ASA 5510, one of the many versions from the Cisco ASA 5500 series. This series of security appliances by Cisco is one of the most popular hardware firewalls in the market. Learn How To Install an SSL Certificate on Cisco ASA 5510 Step Read more [...]

(5 votes, average: 4.20 out of 5)

Latest Firefox Version Supports Public Key Pinning

Firefox 32, the latest version by Firefox comes with a newly added defense feature known as Public Key Pinning. This feature helps in preventing hackers from stealing online data. On its company blog, the senior manager of security and privacy engineering at Mozilla, Sid Stamm wrote, "In Firefox 32, any certificate in the verified certificate chain corresponds to one of the known good (pinned) certificates, Firefox displays the lock icon as normal." To this, he also adds that if the root certificate Read more [...]

(5 votes, average: 4.20 out of 5)

SSL Certificates Now Boost Your Google Ranking

Google announced on August 6th that HTTPS encryption – available exclusively from SSL certificates – will now be a positive factor for search ranking position and SEO.Mastering SEO and getting the best ranking for your site is important. Google is the world’s most popular search engine by far and a majority of traffic for many sites, including personal websites, and especially for e-commerce sites, is driven by Google.So, let’s make it simple: Having SSL for your site is a good Read more [...]

An Unlikely Match Made in Heaven!