 |
 SSL - A look at how the Secure Sockets Layer, a protocol for transmitting private documents via the Internet, works. There are also links to more SSL information.
|
|
|
|
|
Wildcard SSL Certificate Security Problems. A look at wildcard SSL
certificate security problems, and useful advice about how to avoid becoming a victim of phishing schemes.
|
Wildcard SSL Certificate Security Problems
For organisations hosting a single domain name but with different subdomains (e.g. secure.yourdomain.com, www.yourdomain.com, signup.yourdomain.com etc), the wildcard certificate is a cost effective and efficient means of securing all sub domains without the need to manage multiple certificates. All the features, compatibility and warranty of normal SSL certificates are normally included.
As with any SSL certificate, wildcard SSL certificate security problems can sometimes arise from the expiration of the certificate, so it is important to renew it well in advance of it's expiration date. Wildcard SSL certificate security problems can also arise if they are your only means of security. SSL does not protect your server from attacks, nor your admin catalog from malicious hacks. In order to protect your server and files you need to use facilities such as firewalls, virus checkers, Apache and IIS user and password protection for directories and files.
Another major cause of SSL and wildcard SSL certificate security problems are phishing schemes. Phishing is the act of luring someone to a spoofed web site. The spoofed site is usually designed to look like the legitimate site, sometimes using components from the legitimate site.
|
|
|
|
Wildcard SSL Certificate Security Problems
The best way to verify whether you are at a spoofed site is to verify the SSL certificate by checking the yellow secure site lock icon on the status bar. If the lock is closed, then the site uses encryption. Double-click the lock icon to display the security certificate for the site.
This certificate is proof of the identity for the site. When you check the certificate, the name following 'Issued to' should match the site you think you are on. If the name differs, you may be on a spoofed site. If you are not sure whether a certificate is legitimate, do not enter any personal information. Play it safe and leave the Web site.
The most relevant links we could find, placed here free
 Ant-Phishing Working Group - Find more information about the dangers of phishing as mentioned on the 'wildcard SSL certificate security problems' page here. www.antiphishing.org
Comodo SSL - This article looks at the security concerns of some SSL certificates. www.instantssl.com
|
|
SSL Certificates Home
Back
Page Index A-Z
