Is your website secure? One thing to consider is securing your website with [HTTP Strict Transport Security (HSTS)][1]. Implementation of HSTS is an extension of the [Always On …
PKI Consortium blog
Posts by tag SSL/TLS
UPDATED September 23, 2014: The following blog post has been updated with action taken in recent weeks, as well as to reflect helpful user comments left on our [August 28 blog p…
On August 19, [Google announced a new policy][1] that accelerates the deprecation of SHA 1 certificates, potentially causing websites using SHA 1 certificates to display warning…
Google’s announcement that it will give priority ranking to SSL enabled sites is a key milestone for increased use of SSL on the Internet. Google announced a change to its ranki…
Every time something positive is published about SSL and encryption,such as Google’s recent decision making use of https encryption a favorable rating factor for a website, or n…
Short answer: Government CAs can still be considered “trusted third parties,” provided that they follow the rules applicable to commercial CAs. Introduction On July 8 Google ann…
A deadline set by the CA/Browser Forum for the use of Internal Names is quickly approaching, and many system administrators need to understand how best to adapt to this change. …
SSL/TLS
With the announcement of the Heartbleed bug and the resulting need to revoke large numbers of SSL certificates, the topic of certificate revocation has, once again, come to the …
Elliptic Curve Cryptography (ECC) has existed since the mid 1980s, but it is still looked on as the newcomer in the world of SSL, and has only begun to gain adoption in the past…
Google
The recent Heartbleed issue has reawakened interest in SSL certificate revocation (see Adam Langley’s [blog][1], Larry Seltzer’s articles [here][2] and [here][3], and Steve Gibs…
