'Net Features : ssl certificates

GlobalSign Accelerates SSL-Certified Pages

Michael Garrity — Fri, 23 Nov 2012 16:15:00 GMT

One of the world’s largest SSL certificate providers, GlobalSign, has partnered with Web performance and security company CloudFlare to significantly accelerate the load speeds and reduce the geographical delay of SSL-secured Web pages. And best of all, this speedy service comes at no additional charge or configuration requirements for GlobalSign customers.

After integrating the technology of these companies, GlobalSign has been able to increase load speeds by as much as six times that of traditional SSL. The hope is that by noticeably improving the performance of SSL-secured Web pages, the company will foster wider acceptance and adoption of SSL certificates that help Web businesses reduce the risk of data breaches, compromised sites and, most important, customer identity theft and fraud. Of course, it also helps that faster performing websites tend to increase customer loyalty and diminish site abandonment rates.

Historically, many sites have refrained from implementing SSL on their sites outside of their login or checkout pages out of a fear that it would disrupt the end-user experience. But now, as a result of its collaboration with CloudFlare, when browsers visit GlobalSign-protected websites, they can validate the certificates much quicker. This is because of CloudFlare’s network of 23 global datacenters that reduce the amount of time it takes a Certificate Authority (CA) SSL to deliver an SSL certificate’s validity status to the browser.

In addition, this CloudFlare’s international network provides resilience to distributed denial of service (DDoS) attacks to protect GlobalSign Online Certificate Status Protocol (OCSP) services, which indicate the validity status of its SSL certificates.

But that’s not all in the way of recent news for GlobalSign. Earlier this week, the company announced the general availability of its new (and free) SSL Configuration Checker online service that lets website administrators confirm that their SSL is configured correctly across all of their websites; the service even provides actionable insights and guidance on how they can fix any questionable or exploitable configurations, as well.

When SSL is accurately configured, it dramatically improves the performance of the website and strengthens its ability to secure the site, offering a defense against cyber criminality, such as SSL BEAST, CRIME and other attacks that target faulty SSL configurations.

The service integrates Qualys SSL Labs assessment technology, which audits SSL ecosystems, raises awareness and provides tools and documentation for website owners that allow them to improve their SSL implementations.

SSL Configuration Checker can be used by any organization by simply visiting sslcheck.globalsign.com, where users just have to enter the URL of the site they want to check. Following a quick test, the service will return a letter grade of the site’s configuration, along with a brief explanation of any issues it finds and some remediation steps they can follow to correct the issue(s).

The tool is already available in an array of languages, including Dutch, English, French, Japanese, German, Spanish and Russian.

GlobalSign Alert Service Helps Fight Phishing

Michael Garrity — Wed, 19 Sep 2012 22:00:00 GMT

In order to provide its customers with real-time alerts about their SSL Certificates, which tell them when their websites are compromised and used to support phishing attacks, certification authority GlobalSign has partnered with Internet services provider Netcraft.

The GlobalSign Netcraft Phishing Alert service will first tell GlobalSign when one of its customers’ websites is being used to support phishing attacks, and the company will then immediately notify and advise the customers on remediation steps so they can quickly fix the problem and stop the attack. And, if GlobalSign discovers that a site has specifically created for malicious intent, it will revoke its certificate.

This service, the first of its kind, means customers can maximize their investment in GlobalSign with additional security against these highly prevalent, not to mention persistent, criminal attacks. For a partner, Netcraft was an ideal selection, as it is continually produces an updated phishing feed (one that is currently used by all of the major Web browsers), and it has blocked more than 5 million phishing attacks to date.

Websites are required to have an SSL Certificate to activate the SSL/TLS technology built into a browser or server. Once it’s activated, it will provide an encrypted link between the browser and server to secure transactions or data submission. As SSL trust signals are meant to inspire confidence in users, it can be especially disastrous for consumers and website owners if a site is compromised and used to deploy phishing pages. Luckily for GlobalSign customers, the GlobalSign Netcraft Phishing Alert will significantly reduce their risk of becoming victims of such an attack.

GlobalSign Rolls Out MSSL v2

Michael Garrity — Tue, 06 Sep 2011 20:00:00 GMT

GlobalSign, the Certification Authority and specialist in SSL Certificate security, announced last week the launch of MSSL v2, the new version of their Managed SSL platform.

The company has found success in the certification field by offering publicly-trusted SSL Certificates, EV SSL, Managed SSL services and Code Signing for use on all platforms, including mobile. The first version of MSSL was GlobalSign's unique SaaS platform, and their upgrades have come as a response to both direct user feedback and the changing requirements of enterprise security.

The new version will provide user-friendly and highly-scalable methods for managing mulitple SSL Certificates for everything from the simplest to the most complex and distributed of organizations.

Among the new updates to MSSL are:

- Support for group companies/distributed entities: Now, a single umbrella entity can register all of its companies, branches and departments and have them easily centralized for management and billing purposes.

- Intuitive user interface: They've created a much simpler layout that is easy to use and lets the users quickly access functions and reports. Also, crucial information like pre-vetted domain pools and Certificates nearing expiration are clearly presented on the homepage. These changes are all based on direct user feedback.

- Expanded public ordering pages: With optional password protection and Pay-As-You-Go support, even heavily-distributed organizations can centralize Certificate applications by using these new pages, which allow anyone within the group to apply for a Certificate.

- Granular user rights: Permissions for users are now able to be assigned at the domain and company levels, allowing control over which staff members can apply for, approve, renew and revoke Certificates.

- Exportable audit logs: Any and all user activity will now be logged and exportable, which is a necessity when it comes to meeting increasingly rigorous compliance requirements.

As a service to customers and prospects, GlobalSign recently hosted a special webinar that included a virtual tour of the new features and functions of MSSL v2. To view the webinar, or just get more information on the Managed SSL platform's upgrades, simply click here.

What is a Multiple Domain (UCC) SSL Certificate?

Pete Prestipino — Tue, 05 Apr 2011 13:00:00 GMT

If you are selling online then you should be familiar with an SSL certificate. But what about a UCC SSL Certificate?

Unified Communications Certificates (UCC) are SSL Certificates that secure multiple domains and multiple hostnames within a domain. They allow you to secure a primary domain, and up to 99 additional Subject Alternative Names, in a single certificate. UCCertificates are ideal for Microsoft® Exchange Server 2007, Exchange Server 2010, and Microsoft Live® Communications Server.

UC Certificates are compatible with shared hosting however, the site seal and certificate "Issued To" will only list the primary domain. Please note that any secondary hosting accounts will be listed in the certificate as well, so if you do not want sites to appear 'connected' to each other, you should not use this type of certificate.

Symantec Automates SSL Certificate Renewals

Linc Wonham — Fri, 18 Mar 2011 18:00:00 GMT

Renewing secure sockets layer (SSL) certificates can be a pain point for website owners, but two new features from Symantec are designed to fully automate the process.

Customers who have deployed VeriSign SSL Certificates can automatically renew for up to six years with the new Express Renewal and AutoPay features. Express Renewal eliminates the need to submit a certificate signing request (CSR) or re-install a VeriSign SSL Certificate when it approaches renewal time.

When a certificate is up for renewal, the SSL customer can now pay for a new validity period. Customers can also activate the AutoPay renewal service upon initial enrollment. By automating payment for renewal, AutoPay service helps ensure that SSL protection continues without interruption.

Express Renewal is available at no charge to VeriSign SSL and EV SSL customers who submit a minimum 2048-bit CSR. Customers can activate and deactivate AutoPay at any time, for any reason and without penalty, for as long as they hold their VeriSign SSL or EV SSL Certificate.

Comodo Offers HackerGuardian for SSL Certificate Purchase

Pete Prestipino — Wed, 15 Sep 2010 15:41:00 GMT

As Website Magazine gets closer to its upcoming Web hosting edition (distributed in October 2010), our interest is piqued by pretty much anything and everything related to the topic - and today's no different.

Internet security company Comodo is offering a free annual subscription to HackerGuardian with every purchase of an SSL certificate. If you're concerned about the online security of your customers, this at least deserves a serious look.

HackerGuardian is PCI scanning tool that scans externally facing IPs and generates reports detailing found vulnerabitlities and supplies the merchant with the information needed to fix any issues. HackerGuardian even proviees all the necessary documentation that a merchant is required to send to their acquiring bank to validate quarterly PCI compliance is included with the HackerGuardian solution.

“We are delighted to be able to offer our customers this free HackerGuardian service for one year,” said Melih Abdulhayoglu, Comodo CEO and chief security architect. “This powerful combination of SSL and HackerGuardian helps businesses to address the mandatory nature of PCI compliance and to meet those requirements.

Automated SSL Certificate Verification Service

Pete Prestipino — Tue, 24 Aug 2010 15:00:00 GMT

Authentication and encryption service provider DigiCert has unveiled an automated SSL certificate verification service to ensure Web services are properly secured.

The service automatically checks every SSL certificate issued to ensure all are functioning properly after installation. The automated certificate checker verifies that both the certificate and any necessary intermediate certificates have been correctly installed on your server. If any problems are identified, DigiCert will contact the customer directly with an explanation of the error and the instructions on how to resolve it.

SSL certificates encrypt the transfer of sensitive information online. From online shopping to secure email messages or even private health records, SSL certificates have a wide variety of applications in every industry.

“Our new automated certificate checker has been a very successful service for our customers and our support team,” says Flavio Martins, Vice President of Support and Validation. “This service can identify various installation problems, including intermediate certificate issues and name mismatch errors. If a problem is identified, we send an email to the customer explaining the error and also include the steps to fix it. Additionally, our support team is readily available and willing to assist customers with completing proper installation and resolving any errors.”

GoDaddy versus Verisign [SSL Certificates]

Pete Prestipino — Thu, 19 Nov 2009 15:00:00 GMT

With the online holiday shopping season fast approaching, SSL certificates (which provide server to browser encryption, the padlock icon and the familiar https prefix to secure a website) are the focus of many merchants. So where are merchants turning for their SSL certificate needs these days? By the looks of it, they are going to GoDaddy.

In its Netcraft LTD Secure Server Survey for November 2009, the analyst firm announced that GoDaddy's overall SSL market share has grown four times faster than VeriSign's during the past year. NetCraft projected that GoDaddy would pass long-time market leader VeriSign in less than 18 months. GoDaddy apparently does not want to wait that long and is now offering its EV SSL Certificate for $99. Obtaining a relatively identical security level at VeriSign would cost more than $1400.

“The reason for our growth is simple - our customers are smart enough to know they can get a world-class SSL Cert without having to pay through the roof,” said GoDaddy CEO and Founder Bob Parsons. “You could purchase 14 GoDaddy Certificates for the same price as a single VeriSign Cert, not to mention the great support our customers enjoy.”

Stay up to date on the latest Internet trends:
Request a professional subscription to Website Magazine,
the most popular print publication on Web success.

Google Introduces SSL Certification Error Messages

Pete Prestipino — Mon, 24 Aug 2009 18:12:00 GMT

Some webmasters are receiving warnings from Google Webmaster Tools about SSL certification issues.

Google is apparently (with some difficulty) notifying users when the host name of their site does not match any of the "Subject Names" in their SSL certications. The result of these error is often that Web browsers will often block users from accessing the site or display a security warning when a site without a proper SSL is accessed.

Google's John Mu responded in a forum thread that Google has added the messages to inform webmasters of issues with regards to their SSL certifications. The informational message does not affect site crawling, indexing or ranking.

Stay up to date on the latest Web trends:
Request a pro-level membership at Website Magazine

Thawte Unveils 4 & 5 Year SSL Certificates

Pete Prestipino — Thu, 19 Jun 2008 19:31:00 GMT

Thawte has introduced additional term validity options for a number of our SSL certificates. Longer term validity means fewer certificate renewal enrolments and installations saving you time, money and hassle. If you've ever had to go through the SSL renewal process, you may be jumping up and down right now. Here are the thawte certificates that are available in four and five year terms:

SGC SuperCerts: A premium SSL certificate with Server Gated Cryptography that provides automatic 128-bit step-up encryption, yet capable of 256-bit encryption, and full authentication.
SSL Web Server Certificates: A secure SSL certificate that provides full authentication and is capable of 256-bit encryption.
SSL123 Certificates: A domain validated SSL certificate that is capable of 256-bit encryption and is issued within minutes.