Reading Time: 2 minutes Should Google favor sites with SSL in their search results? Matt Cutts thinks so. He is the very public head of Google’s Webspam team and works on search engine optimization issues. In recent weeks, Cutts has expressed his opinion at various conferences and public settings that Google should update its search algorithm to reward sites…

Reading Time: 4 minutes   Business Challenge Many customers who are interested in buying a product off a new website feel unsure about the website’s authenticity. They worry that their information is not secure on the web, and that some websites may be used for scams. Even as the web’s presence continues to rise and e-Commerce forms a growing…

Reading Time: 2 minutes When obtaining an SSL Certificate, the Certificate Authority (CA) performs a verification of the requesting organizations identity that will vary depending on the level of authentication that type of certificate requires. While CA’s offer the same levels of authentication, there is a difference in their validation methodologies. What are the main differences in validation by…

Reading Time: 3 minutes In response to a reported vulnerability in the popular OpenSSL cryptographic library, Comodo is urging its customer, partners and all users of OpenSSL to apply the most recent patched updates as soon as possible. Comodo will work with customers, partners, platform vendors and service providers to help ensure affected parties are made fully aware of…

Reading Time: 4 minutes Comodo Antivirus Labs has identified a new and extremely dangerous variant of the Zeus banking Trojan. Hackers use Zeus to launch attacks that obtain the login credentials of visitors to online banking sites and commit financial fraud. The significance of this variant is the combination of a legitimate digital signature, rootkit and malware component. Malware…

Reading Time: 2 minutes As well as issuing SSL Certificate, a Trusted Root CA certificate can also be used to create another certificate, which in turn will then be used to issue SSL Certificates. This can be seen from the example certificate shown below. The majority of SSL certificates in use around the world are Chained Certificates, also referred…

Reading Time: 1 minute Recently, we reviewed a document of best practices in deploying SSL Certificates published by Qualys, a prominent security company.  Their document had some very good advice. In particular, we agree whole heartedly with their recommendation that an SSL user should “obtain certificates from a reliable Certificate Authority”. They went on to list criteria that you…

Reading Time: 2 minutes Retailers who accept credit cards must periodically demonstrate that they are in compliance the Payment Card Industry Data Security Standards (PCI DSS). Large retailers are required to undergo periodic audits by independent auditors, called qualified security assessors (QSAs). In a very unusual move this week, the QSA for Target was named in a Federal lawsuit…

Reading Time: 1 minute SSL Certificates will only be recognized by a browser if the Root Certificate of the CA is present within the “trusted Root Certificates” store of the browser. CA Root Certificates are added into the trusted Root Certificate store by the browser or operating system vendor, such as Microsoft or Netscape. In general SSL vendors need…

Reading Time: 2 minutes Authentication solutions prevent fraudulent account access risks. They also enable compliance with many security, banking and privacy regulations. What is Authentication? Authentication describes the verification process websites use to determine if each site visitor actually is who they say they are. The importance of the process is rooted in the crucial need for websites representing…