Subscribe:
Showing posts with label Wildcard SSL Certificate. Show all posts
Showing posts with label Wildcard SSL Certificate. Show all posts

Thursday, 16 June 2011

Trust Guard to Release Educational Video on the Importance of PCI Scanning and an SSL Certificate

Trust Guard releases educational video illustrating the differences between PCI scanning and an SSL Certificate. They intend to use the video to educate business owners and customers on website security scanning, in hopes of lowering
Information theft in 2011.


Ogden, Utah (PRWEB) June 13, 2011


Trust Guard releases educational video illustrating the differences between PCI scanning and an SSL Certificate. They intend to use the video to educate business owners and customers on website security scanning, in hopes of lowering information theft in 2011. Trust Guard co-founder, Dave Brandley believes the number of attacks is in direct correlation to the number of websites not up to par with PCI Certification and security scanning.


The video explains PCI Certification, created by credit card companies such as Visa, and Mastercard etc. to protect sensitive information. It is required by any business accepting credit card payments online. PCI Compliance Certification must be kept up-to-date otherwise new security holes may allow hackers the opportunity to steal data. Website security scanning is the way to identify these “security holes”, because scanning is constant and ensures that when vulnerability is found it can be closed immediately before hackers find a way in.


This year has started with a number of hacks to huge companies such as Sony, Apple, Facebook, and even Foxnews. “Hackers are becoming faster, and better, because of that our defense has to be better and faster,” says Brandley. He added that a major problem is that people have a hard time understanding the seriousness of the threat. When asked about the recent press release by The Department of Justice announcing the verdict of Rogelio Hackett Jr., who was found guilty this year for trafficking counterfeit credit cards, and aggravated identity theft. “According to court documents, U.S. Secret Service ...found more than 675,000 stolen credit card numbers...in his computers and email accounts”, Brandley didn't seem surprised, “Unfortunately, it happens every day. It's really scary, but because it's done in such an impersonal way people sometimes have a hard time realizing the magnitude of the problem”.


According to Brandley, “...our partners report that over 80% of the websites tested fail their first PCI Compliant Security Scan. This is how people like Hackett can manage to steal 675,000 credit card numbers; unfortunately most people are not caught”.


Despite all this, Brandley believes things are getting better as information is disseminated to the masses. “People are becoming more educated, partly because of material like our video and general information on the Internet. People have better access to information now and they are starting to understand that it's a serious threat to their well-being. Business' and customers both are starting to understand too that an unsecured website can result in fines and their potential bankruptcy, and nobody wants that”.


# # #


For the original version on PRWeb visit: http://www.prweb.com/releases/prweb2011/6/prweb8562850.htm

Tuesday, 7 June 2011

UCC SSL: If You Need SSL on Many different Domains



This means that buying an SSL Certificate for example dot com will not give you SSL security for anotherdomain dot com or secure.example dot com. 

Got multiple subdomains needing SSL security? 

Wildcard SSL is your best option. This solution isn't enough for those who need SSL on multiple domains. What about them? Unified Communications Certificate (UCC) SSL is the answer.

Know the Difference between Wildcard and UCC SSL

A Wildcard in the certificate's Common Name lets one certificate be used on different subdomains. For instance, the Common Name *.example dot com enables you use one wildcard certificate for www.example dot com, work.example dot com, or settings.example dot com, but not on example.net, anothername dot com, or shop.anothername dot com. 

The good thing is that UCC SSL will function just fine in the final example. UCC SSL, instead of using the Common Name field, uses the Subject Alternative Name (SAN) field on the certificate. The SAN let you add more domains that will use one UCC SSL certificate. Only one UCC SSL certificate will be enough for example dot com, secure. Example dot com, another name dot com, anothername.net, and one more dot com. Depending on your deal with the certificate provider, you are allowed to add a specific number of domains or subdomains on the certificate.

Benefits to UCC SSL

The most obvious benefit to using UCC SSL Certificates is to cut costs. If you only use a few domains, you may be fine with typical SSL certificates that cost about $150 each. But once you need five domains, you will need to come up with $750. Think how much you can save on 3 domain names when UCC SSL costs only $300 each.

Sometimes, you can get additional domains on the same certificate at $40 each. Some providers will even let you add a limited number of subdomains on the UCC SSL certificate at no charge as a bonus.

UCC SSL is good for another reason, and that's manageability. Most people will cringe at the thought of having to purchase, set up, and then renew annually several SSL certificates. It's a difficult task to whoever is supposed to manage them. Errors can be easily made when managing a number of certificates. Delays from fixing errors will cost you time and money. Just think about how that compares to worrying about just a single UCC SSL certificate. It's a whole lot easier to manage a single certificate. Errors are easily minimized.


Unlike with Wildcard Certificates, UCC SSL certificates may be used with Extended Verification (EV). In other words, visitors that view the SSL secured pages of your website will see a greed address bar on their browser. This will enhance the confidence of customers or clients when they use your website.

Are There Any Drawbacks?

Using UCC certificates does have some drawbacks. Security is the first that comes to mind. Only one private decryption key is used by all the servers that use a single UCC SSL certificate. Several servers usually host multiple domains. This means that if someone manages to compromise one of your servers and retrieve the decryption key, every on every server that uses the same certificate is also compromised.

If, for some reason, your UCC SSLCertificate is revoked, all domains will not work. That basically means that you have to close your website until you either get a new UCC certificate, or get a certificate for every single domain on your site.