Video Screencast Help
Search Video Help Close Back
to help

Website Security Solutions

Showing posts tagged with Extended Validation SSL
Showing posts in English
Tim Callan | 18 Dec 2012 | 9 comments

We're seeing active discussion online about the possibility of hijacking a single frame in a production site to steal logins or PII. The scenario is that a criminal gang would redirect this frame (through DNS poisoning, let's say) and populate it with its own content from servers under its control. Presumably this content would involve form fields asking for information the criminals want to receive and which you would be willing to share in this context (such as your bank account login or social security number).

Now, the recent dialog is around the scenario where this proposed attack happens on a site with an Extended Validation SSL Certificate. The certificate identifies the controller of the top-level frame and does not report on the sources of any internal frames in that page. That is in keeping with near-ubiquitous practices in consumer Web applications...

Tim Callan | 18 Dec 2012 | 1 comment

Hi folks. Sorry for the lack of posts lately. I've been slammed.

Writing today because Firefox 3.5 has broken the download record for a new browser version with over 8 million downloads in a single day. One subject that has been the source online discussion is the fact that the EV certificates for a series of SSL brands (four that I know of) have stopped showing up green in Firefox 3.5.

You can be assured that this problem does not happen with the EV SSL Certificates from VeriSign, thawte, or GeoTrust.

Tim Callan | 18 Dec 2012 | 0 comments

Here's today's press release about the near-ubiquity of Extended Validation SSL among Japanese banking institutions.

Tim Callan | 18 Dec 2012 | 0 comments

I've been waiting for it to happen, and here we are. Apple officially wins the smartphone race for Extended Validation SSL support. That's because Mobile Safari now has Extended Validation SSL support. On the heels of Internet Explorer's adoption of EV support in January 2007, the desktop saw a wave of browsers adding in support. With over 60% of mobile browser usage, iPhone is the pacesetter in this market. I hope Apple has broken the ice for mobile devices to do the same thing.

Tim Callan | 18 Dec 2012 | 1 comment

With the release of Safari 4 and the ongoing adoption of current versions of other browsers, the number of client systems using EV-compatible browsers has exceeded 75%.

Tim Callan | 18 Dec 2012 | 0 comments

I've written in the past about how phishers and other online scammers are attaching themselves to topical items like tax season and holiday shopping. Well, now it looks like March Madness is the latest victim.

That makes all the sense in the world. These fraudsters are trying to trick Internet users into giving away information or giving malware access to their systems. Originally it was a matter of spoofing someone's PayPal or bank account. As the users have gotten wiser (although these workhorse counterfeits are still happening in huge numbers) the attackers have constantly sought green fields. One consistent technique is to take the prospective victim out of the context in which he is looking for a scam. Your bank account is too suspicious? No problem. How about your utility bill or your favorite e-commerce site or your wireless phone service? Account...

Tim Callan | 18 Dec 2012 | 0 comments

That's right. There is an entire continent on which 100% of the Internet browsers are EV SSL compatible. What's the continent? Antarctica, of course.

Tim Callan | 18 Dec 2012 | 2 comments

It's 03/03/09. Square Root Day. Enjoy it because it won't happen again until 2016.

It's also the two year anniversary of EV SSL, as we announced yesterday. This new SSL standard has made a lot of progress over the past two years. I'm sure the next two will be even more influential.

Tim Callan | 18 Dec 2012 | 0 comments

The Safari 4 beta is out. While many of us were pleased to see EV SSL support in version 3.2, there was a widespread opinion that the organization information was not prominent enough. Now we get a peek at version 4, and Apple appears to have fixed that problem. But don't just take my word for it. Here is a review with screen caps from a Safari user.

As an aside, this same reviewer has comments on the other popular browsers and their EV SSL interfaces as well.