Archive for January, 2008

SSL-encrypted Gmail not safe to ’sidejacking’ attacks, says researcher

Robert Graham, CEO of Errata Security, who last year found that it’s possible to capture someone’s session cookie via wireless eavesdropping, now says that even encrypted services such as Google’s Gmail can sometimes provide him with a session cookie. This is a departure from his advice last August when he said SSL HTTPS sessions of […]

Phishers Use DNS Tricks to Direct Users to Bad Sites

The latest information on phishing indicates that fraudsters are increasingly using malicious software to direct users to their deceptive sites.
The Anti-Phishing Working Group (APWG) said in a new report Thursday that it saw a sharp rise in November in malware that directs users to DNS (Domain Name System) servers controlled by phishers.

Extended Validation SSL Certificates (EV SSL)

In 2006, a group of leading SSL Certificate Authorities (CAs) and browser vendors collaborated and approved standard practices for certificate validation and display. It was coined “the Extended Validation Standard”.
To issue an SSL Certificate that complies with the standard, a Certificate Authority must adopt the extended certificate validation practice and pass a Webtrust audit. This […]

About Ecommerce Hosting

While E-commerce software can usually be purchased online from the maker, it is also often found included as part of a specialized e-commerce package from any of the many Web hosting companies out there that support such business operations.
Outsourcing some of your Web site’s technical operations to a Web hosting company may be a good […]

How SSL Certificates Work

Small businesses can make giant leaps toward ensuring the protection of their customers by investing in secure sockets layer (SSL) technology for their Web sites and online transactions. Any Web site collecting confidential information such as credit card numbers should know that SSL is a necessary tool for encoding this sensitive information to protect it […]