Ssl
301 Stories
S'pore firms lag in online protection
News update Fewer popular Web domain owners in Singapore authenticate e-mail or have strong protection for Web surfing compared to global sites, new scorecard shows.
Tags: Authentication and encryption, Network security, Security Management, Web browsers, Web sites, Security, E-business, E-mail Authentication, SSL, Web sites
Securing encrypted traffic in SSL
Insight perspective Encrypted traffic can still be dangerous, despite being carried by Secure Sockets Layer. Find out what options firms can consider to contain threats via SSL.
Tags: Data security, Authentication and encryption, Network security, Security Management, Authentication, Malware, SSL, antivirus, SSL certificate, certificate authority
Inventor: SSL not to blame for security woes
Insight newsmaker The Secure Sockets Layer has remained relevant since its release in 1995, says Taher Elgamal, and so-called 'broken' SSL has little to do with protocol.
Tags: Web sites, E-commerce, Data security, PC security, Security Management, Security implementation/standards, Web browsers, Certificate, Microsoft Corp., Cookie
Apple plugs holes for domain spoofing, other attacks
News Security update for Mac OS X addresses 43 specific issues, including holes that could allow an attacker to take over the computer.
Tags: Network security, Security Management, Web sites, Apple Inc., Security, SSL, Web sites, Domain, Attack, Apple Mac OS X
Zero-day flaw found in Web encryption
News Security issue with underlying web encryption protocols TLS and SSL has left many authentication mechanisms open to attack, according to security researchers.
Tags: Authentication and encryption, Business security, Authentication, Security, Business security, SSL, Authentication and encryption, Web Browser, Zero-day Bug, Encryption
Researchers exploit flaws in SSL, domain authentication system
News Dan Kaminsky and Moxie Marlinspike explain how flaws in the way domain names are verified on the Internet could allow attackers to impersonate a site and steal information from unsuspecting Web surfers.
Tags: Network security, Data security, Authentication and encryption, Web sites, Authentication, Security, SSL, Domain Name, Web Browser, Vulnerability
Web users ignoring security certificate warnings
News Researchers from Carnegie Mellon find that Web users often ignore warnings in browsers about the validity of a Web site's digital certificate.
Tags: Data security, PC security, Network security, Security applications/tools, Security, SSL, Web Browser, SSL certificate, Mozilla Firefox, Mozilla Firefox 2.0
Internet security is everyone's business
Blogs About a month ago, a friend of mine revealed that his bank account had been compromised and that an unknown person or pe...
Use Dovecot for POP3/IMAP services
Techguide Traditionally, if you wanted to set up POP3 or IMAP services on your Linux system, you would use Courier-IMAP, uw-imap, or cyrus-imapd. Another lesser-known but increasingly popular IMAP/POP3 server is Dovecot.
Tags: Open source, Networking, Authentication, POP3, SSL, private key, Mandriva, Mandriva Linux, SSL certificate, Dovecot
New MD5/SSL exploit is not end of civilization as we know it
Techguide MD5 insecure? Absolutely. SSL hacked? Sort of, but it's not broken. A case of certificate authority negligence? You decide.
Tags: Authentication and encryption, Network security, Security Management, Certificate, Security, SSL, VeriSign Inc., SHA-1, Tool, Risk
SSL: Broken even more
Techguide Lately, security conferences have been bad news for SSL. At this year's Black Hat, independent security guru Moxie Marlinspike explained how he was able to completely bypass SSL security.
Tags: Authentication and encryption, Security Management, Data security, PC security, SSL, Web Page, Web Browser, SHA-1, Moxie Marlinspike, SSLstrip
Puerto Rico sites redirected in DNS attack
News Visitors to Google.pr, Microsoft.com.pr, Yahoo.com.pr, and others saw defaced sites instead of the legitimate sites after an attack on the domain name system in Puerto Rico last weekend.
Tags: Network security, Hacking, SSL/TLS, Spam and phishing, Phishing, PayPal, SSL, Site, Domain Name, Attack
Aust police hacking bill passed
News Legislation to boost New South Wales Police computer hacking powers set to go ahead after almost no opposition in the lower house of the state parliament.
Tags: PC security, Hacking, Security, SSL, F-Secure Corp., Attorney General, computer hacking, computer, Ingram Micro Inc., remote access
Top 9 security predictions for 2009
News New year will see high demand for multi-function appliances, with adoption of 3G and Web 2.0 introducing new security vulnerabilities, says Fortinet.
Tags: Data security, Network security, Security Management, Security implementation/standards, Business security, Security, Fortinet Inc., Malware, Security, Mobile
Google making SSL changes
News Security researcher holds off on releasing exploit after talks with Google, the only company to respond to complaints about SSL implementations.
Tags: SSL/TLS, Authentication and encryption, Web sites, Web browsers, Cookie, Security, SSL, Google Inc., MSN Hotmail, Facebook
