Buy from the highest-rated provider
Buy DigiCert Certificate
x
All SSL News
11 Feb 2023
New S/MIME Standards Go Into Effect in September 2023
17 Jan 2023
TrustCor Removed from Browser Root Stores
3 Oct 2022
A New Life for Certificate Revocation Lists
3 Oct 2022
Announcing the Launch of the Chrome Root Program
1 Aug 2022
Changes Coming to OV Code Signing Certificates & Keys Starting Nov. 15
1 Aug 2022
DNS-over-HTTP/3 in Android
1 Jul 2022
If OpenSSL were a GUI
11 Apr 2022
Bulletproof TLS Newsletter - Russia creates certificate authority in response to sanctions
1 Feb 2022
CAs to Deprecate OU Info from Digital Certificates Starting July 1
6 Dec 2021
How Do Digital Signatures Work? A Look at How a PKI Signature Works
8 Oct 2021
4 Takeaways from DigiCert’s 2021 PKI Automation Study
7 Aug 2021
Verified Mark Certificates (VMC) Introduced
1 Jul 2021
The Ultimate Guide to Key Management Systems
1 Jun 2021
Client Authentication Certificate 101: How to Simplify Access Using PKI Authentication
1 Jun 2021
Changes Coming Soon to Code Signing Certificate Security Requirements
1 Jun 2021
Tens of Thousands of GoDaddy Certificates Will Break in macOS 11.4 and iOS 14.6
5 Apr 2021
A safer default for navigation: HTTPS
23 Feb 2021
OpenSSL Cookbook 3rd Edition Released
18 Jan 2021
All About Encryption Backdoors
18 Jan 2021
Block Cipher vs Stream Cipher: What They Are & How They Work
29 Dec 2020
How to Prevent Security Misconfiguration
14 Dec 2020
Perfect Forward Secrecy Explained
14 Dec 2020
Asymmetric vs Symmetric Encryption: Definitions & Differences
7 Dec 2020
Let’s Encrypt Warns of Reduced Compatibility Beginning January 2021
23 Nov 2020
Symmetric Encryption Algorithms: Live Long & Encrypt
23 Nov 2020
New HTTPS-Only Mode Offers Secure Browsing to Firefox 83 Users
17 Nov 2020
Firefox 83 introduces HTTPS-Only Mode
14 Nov 2020
Setting Global Standards for Secure Email Certificates
11 Nov 2020
Second edition of Bulletproof SSL and TLS now in preview
11 Nov 2020
Symmetric Encryption 101: Definition, How It Works & When It’s Used
27 Oct 2020
How Does HTTPS Work?
2 Oct 2020
What Is Smishing? Definition, Examples & Protection Tips
24 Sep 2020
What to Take Away from Iran’s Global Malware Campaign
20 Sep 2020
Say Goodbye to 2-Year Certificates and Hello to Multi-Year SSL Plans
11 Sep 2020
Raccoon Attack: Researchers Find A Vulnerability in TLS 1.2
2 Sep 2020
TLS Is Only as Strong as Its Weakest Link
2 Sep 2020
1-Year Certificates are Here: What Now?
28 Aug 2020
Recent Ransomware Attacks: Latest Ransomware Attack News in 2020
21 Aug 2020
The Day the Music Died: Certificate Expiration Takes Down Spotify
11 Aug 2020
What Is a Certificate Authority (CA) and What Do They Do?
10 Aug 2020
Linux Server Security: 10 Linux Hardening & Security Best Practices
10 Aug 2020
Stay Smarter Than Your Smart Home: 7 Ways to Protect Your Home and IoT Devices
4 Aug 2020
What Is a CAA Record? Your Guide to Certificate Authority Authorization
28 Jul 2020
Everything You Need to Know About OCSP, OCSP Stapling & OCSP Must-Staple
23 Jul 2020
BIMI for Gmail: Google Makes Email Identity Indicators Part of Its New Security Updates
22 Jul 2020
CRL Explained: What Is a Certificate Revocation List?
21 Jul 2020
Stop Certificate Pinning
14 Jul 2020
Your Guide to How PKI Works & Secures Your Organization
10 Jul 2020
New Study Finds 75% of CIOs Are Concerned About TLS Certificate-Related Security Risks
10 Jul 2020
One Year Certs
29 Jun 2020
CA/B Forum Update on EV Certificate Improvements
26 Jun 2020
.Gov Domains to Force HTTPS: HSTS Preloading Will Be Enabled Starting Sept. 1
23 Jun 2020
What Is Data Center Security? 6 Ways to Ensure Your Interests Are Protected
18 Jun 2020
Put Your Risk on Mute: Using PKI to Simplify Remote Workforce Security
16 Jun 2020
Google Chrome to Join Apple’s Safari in One Year Certificate Validity
6 Jun 2020
REvil’s Lessons: It’s Time Law Firms Quit Taking Cybersecurity for Granted
4 Jun 2020
Certification Authority Authorization Checking: What is it, and Why Does it Matter?
4 Jun 2020
12 Enterprise Encryption Key Management Best Practices
3 Jun 2020
The mystery of the expiring Sectigo web certificate
2 Jun 2020
How to do HTTPS … The Right Way
2 Jun 2020
Types of Encryption: 5 Encryption Algorithms & How to Choose the Right One
28 May 2020
A safer and more private browsing experience with Secure DNS
26 May 2020
How to Choose the Right Type of TLS/SSL Certificate
13 May 2020
Don’t ‘Compromise’ Your Code Amid Malware Mayhem
5 May 2020
One-Year Public-Trust SSL Certificates: DigiCert’s Here to Help
2 May 2020
Digital Trust Is Elusive – Are Qualified Trust Services A Solution?
30 Apr 2020
Google Makes Identity Verification Mandatory for All Advertisers
30 Apr 2020
How Netflix brings safer and faster streaming experiences to the living room on crowded networks using TLS 1.3
30 Apr 2020
Plan for change: TLS 1.0 and TLS 1.1 soon to be disabled by default
24 Apr 2020
Advanced Encryption Standard (AES): What It Is and How It Works
14 Apr 2020
Post Quantum Cryptography: Data Security in a Post-Quantum World
10 Apr 2020
Zoom Encryption, Whatsapp Encryption…Wait, Let’s Not Forget About Email Encryption
8 Apr 2020
Cyber Attack Prevention Can Save Businesses Up to $1.4M Per Attack
31 Mar 2020
Firefox continues push to bring DNS over HTTPS by default for US users
20 Mar 2020
How can I check if a website is run by a legitimate business?
18 Mar 2020
Nine Tips to Securely Work from Home During Coronavirus
10 Mar 2020
How Google does certificate lifecycle management
6 Mar 2020
DoH! Firefox Engages More Secure DNS Over HTTPS Protocol — Here’s What That Means for You
6 Mar 2020
Let’s Encrypt to Revoke 3 Million SSL Certificates on March 4
3 Mar 2020
Browsers on track to block 850,000 TLS 1.0 sites
25 Feb 2020
5 Ways to Keep Up with Authentication Certificates
21 Feb 2020
Safari Reduces Max Certificate Validity to 1 Year
13 Feb 2020
What Is PKI? A Crash Course on Public Key Infrastructure (PKI)
13 Feb 2020
Browser Watch: Google Chrome to Block HTTP Downloads
6 Feb 2020
Microsoft Teams went down because of an expired certificate
6 Feb 2020
The 11 Best Cyber Security Books — Recommendations from the Experts
3 Feb 2020
Document Signing Certificates
30 Jan 2020
DigiCert Leads Initiative to Enhance EV SSL Certificates
21 Jan 2020
How to Find and Fix Mixed Content Warnings on HTTPS Sites
21 Jan 2020
NSA: Microsoft Releases Patch to Fix Latest Windows 10 Vulnerability
17 Jan 2020
How Secure is RSA in an Increasingly Connected World?
17 Jan 2020
Potential enhancements to EV standards
17 Jan 2020
How to Find and Fix Mixed Content Warnings on HTTPS Sites
13 Jan 2020
The CA Security Council Looks Ahead to 2020 and Beyond
13 Jan 2020
Researchers demonstrate practical break of the SHA-1 hash function
7 Jan 2020
Chrome will autoupgrade mixed content to HTTPS in February
6 Jan 2020
The Latest PayPal Phishing Email Goes Beyond Your Login Credentials
6 Jan 2020
EFF Releases Certbot 1.0 to Help More Websites Encrypt Their Traffic
6 Jan 2020
Why No HTTPS?
19 Dec 2019
Weak Crypto Practice Undermining IoT Device Security
7 Dec 2019
Chrome Kills Mixed Content for HTTPS
6 Dec 2019
Atlassian uncovers vulnerability with exposed private certificate key
5 Dec 2019
Predictions About IoT and Digital Transformation in 2020
4 Dec 2019
An Update on Android TLS Adoption
30 Nov 2019
Looking beyond the Lock – Reliable Identity in Today’s Web Age
20 Nov 2019
The Top Cyber Security Certifications Hiring Managers Will Look For in 2020
31 Oct 2019
Swimming and Healthcare Security—Both Start with Good Mechanics
25 Oct 2019
A Sneaky Online Security Threat: Encrypted Malware in SSL
21 Oct 2019
2019 State of Global PKI Security and Management – An AppViewX Survey
21 Oct 2019
Browser Updates Round-Up: Continuing the Push for HTTPS Everywhere
21 Oct 2019
Online Identity Is Important: Let’s Upgrade Extended Validation
11 Oct 2019
The Insecure Elephant in the Room
4 Oct 2019
No More Mixed Messages About HTTPS
2 Oct 2019
Chrome UI for Deprecating Legacy TLS Versions
26 Sep 2019
Mozilla and Chrome about to enable DNS over HTTPS
18 Sep 2019
Keygen support dropped with Firefox 69
13 Sep 2019
SSL Certificates: One Year Max Validity Ballot fails at the CA/B Forum
7 Sep 2019
Trust but verify attestation with revocation
1 Sep 2019
How Eradicating EV Certificates Will Change the Internet Landscape
1 Sep 2019
Digital Signatures: Why you should sign EVERYTHING
28 Aug 2019
Why Are You Removing Website Identity, Google and Mozilla?
23 Aug 2019
APWG Phishing Report: SaaS and Webmail Phishing Surpasses Financial Services
18 Aug 2019
Google-Backed Plan To Boost Online Security Meets Opposition
18 Aug 2019
New CA/B Forum Proposal to Shorten Certificate Lifetimes: Will It Improve Security?
18 Aug 2019
Chrome and Firefox Changes Spark the End of EV Certificates
18 Aug 2019
SSL/TLS Encryption and Email Servers
6 Aug 2019
9 Common Myths About CAs
6 Aug 2019
The probability that an EV SSL certificate is associated with a bad domain is 0.013%
5 Aug 2019
Bulletproof TLS Newsletter: Kazakhstan intercepts TLS traffic
20 Jul 2019
Encryption and decryption – the never-ending battle
19 Jul 2019
The Advantages of Short-Lived SSL Certificates for the Enterprise
14 Jul 2019
What is Shadow IT?
7 Jul 2019
10 Types of Phishing Attacks and Phishing Scams
28 Jun 2019
HTTPS Phishing: The rise of URL-based attacks
26 Jun 2019
What Are Subordinate CAs and Why Would You Want Your Own?
17 Jun 2019
What the Latest Firefox Update Means for SSL Certificates
6 Jun 2019
LinkedIn suffers SSL/TLS certificate expiration. Again.
6 Jun 2019
ACME Protocol: What it is and how it works
6 Jun 2019
Certificate Authority Certinomis removed from Firefox browser
2 Apr 2019
Code Signing Compromise Installs Backdoors on Thousands of ASUS Computers
17 Mar 2019
Mass Revocation: Millions of certificates revoked by Apple, Google & GoDaddy
12 Mar 2019
Should the tech industry be the arbiters of morality?
12 Mar 2019
Fake EV certificates used in Steam trade phishing attacks
8 Mar 2019
61% of the world’s politicians have unsecured websites
1 Mar 2019
TLS Pinning in Mobile Apps
26 Feb 2019
ProtonMail SSL certificates and DarkMatter
23 Feb 2019
71% of Organizations don’t know how many certificates & keys they have
10 Feb 2019
PKI for busy people
5 Feb 2019
How to Setup a Free SSL Certificate on WordPress
4 Feb 2019
Google Chrome 72 deprecates support for TLS 1.0, TLS 1.1
20 Jan 2019
Understanding the Encryption Technology Behind SSL
14 Jan 2019
Firefox will soon warn you about the Man-in-the-Middle
3 Jan 2019
2019 – Looking Back, Moving Forward
22 Dec 2018
2018 was a busy year for SSL/TLS
18 Dec 2018
Digital Certificates Expiring on Major Platforms – We’ve Seen This Before
18 Dec 2018
Is the green padlock dead?
10 Dec 2018
Security Predictions for the New Year and Beyond
9 Dec 2018
Ericsson Outage: Expired Certificate knocks millions of UK mobile phones offline
8 Dec 2018
CA Security Council (CASC) 2019 Predictions: The Good, the Bad, and the Ugly
28 Nov 2018
HTTPS Phishing: 49% of Phishing Websites now sport the green padlock
13 Nov 2018
SSL Certificates For Multi-Level Subdomains
3 Nov 2018
Comodo CA Changes Its Name to Sectigo
30 Oct 2018
Bulletproof TLS Newsletter #46 The end of TLS 1.0 and 1.1
3 Oct 2018
Google Chrome 69 Removes Secure Badge from HTTPS websites
14 Sep 2018
Let’s talk about some common PKI Certificate Management Mistakes
8 Sep 2018
Google’s plan to kill the URL is a golden opportunity for Certificate Authorities
31 Aug 2018
Why websites should be using HSTS to improve security and SEO
31 Aug 2018
This is what happens when your SSL certificate expires
30 Aug 2018
A Detailed Look at RFC 8446 (a.k.a. TLS 1.3)
14 Aug 2018
When Encryption Goes Wrong: The Babington Plot
14 Aug 2018
A Matter of Trust: Survey Examines Impact of EV Certificates
13 Aug 2018
More Government Websites Encrypt as Google Chrome Warns Users Non-HTTPS Sites Are 'Not Secure'
13 Aug 2018
Let’s Talk About HTTPS, Google and China
13 Aug 2018
Cisco let an SSL cert expire in its VPN kit
2 Aug 2018
New CAB Forum Validation Rules Go Into Effect Today
24 Jul 2018
Chrome 68 is out, all HTTP sites will now be marked Not Secure
11 Jul 2018
Here’s what happens when your Private Key gets compromised
28 Jun 2018
Bulletproof TLS Newsletter - Does TLS have to change constantly to make it future-proof?
20 Jun 2018
Fortify Allows Users to Generate X.509 Certificates in Their Browser
6 Jun 2018
Apple Announces Certificate Transparency Requirement
5 Jun 2018
Keeping Track of Changes in Chrome for HTTPS & HTTP Indicators
4 Jun 2018
A cartoon intro to DNS over HTTPS
20 May 2018
Google will remove the “Secure” indicator in September
3 May 2018
Google launches .app, one of the first TLDs with built-in HTTPS
2 May 2018
Certificate Transparency: Starting today, all SSL certificates must be logged
23 Apr 2018
Chrome 66 Launched: Millions of SSL Certificates Potentially Distrusted
14 Apr 2018
Symantec Re-issue: Millions of SSL Certificates will be distrusted Tuesday
11 Apr 2018
TLS 1.3 Includes Improvements to Security and Performance
29 Mar 2018
Making the Grade: Achieve SSL Labs A+ Grade with Imperva WAF
25 Mar 2018
Symantec cert holdout sites told: Those Google Chrome warnings are not a good look
8 Mar 2018
Distrust of the Symantec PKI: Immediate action needed by site operators
5 Mar 2018
Trustico States They Stored Private Keys for Customers' SSL Certificates
4 Mar 2018
23,000 SSL certificates to be mass-revoked following DigiCert/Trustico spat
12 Feb 2018
Google Intensifies Campaign for Websites' Use of HTTPS Encryption By Placing 'Not Secure' Tags Starting July
30 Jan 2018
Reminder: 3 Year Option for SSL Certificates ends March 1, 2018
7 Jan 2018
2018 – Looking Back, Moving Forward
6 Jan 2018
TLS 1.3 Update: Everything you possibly needed to know
9 Dec 2017
Banking Apps Vulnerability: Man-In-The-Middle Flaw in Certificate Pinning
7 Dec 2017
Baptists & Bootleggers: Consensus on Eliminating the Secure DV SSL Indicator
30 Nov 2017
Only 71% of Government Websites Pass the SSL Test
18 Nov 2017
What is Server Name Indication (SNI)?
18 Nov 2017
Shamed TLS/SSL cert authority StartCom to shut up shop
5 Nov 2017
Certificate authority business undergoes major changes
1 Nov 2017
Comodo Group sells Comodo CA
30 Oct 2017
Google: Chrome is backing away from public key pinning, and here's why
26 Oct 2017
What is DNS over TLS? Everything you need to know
11 Oct 2017
Four of the Five Biggest Defense Contractors in the World lack Encryption
3 Oct 2017
What is Hypertext Strict Transport Security (HSTS)?
28 Sep 2017
Broadening HSTS to secure more of the Web
28 Sep 2017
Bulletproof TLS Newsletter #32 CAA is now mandatory
19 Sep 2017
Fixing HPKP with Certificate Constraints
12 Sep 2017
Comodo Caught Breaking New CAA Standard One Day After It Went Into Effect
12 Sep 2017
Chrome’s Plan to Distrust Symantec Certificates
6 Sep 2017
Fixing HPKP with Pin Revocation
23 Aug 2017
Wildcard SSL Certificates and Phishing: A Match Made in Heaven
11 Aug 2017
Symantec sells its problem SSL unit to DigiCert for $1B
11 Aug 2017
Enabling Certificate Details on Chrome 60
10 Aug 2017
Symantec sells its CA business to DigiCert
1 Aug 2017
Google announces plan to distrust Symantec SSL certificates
29 Jul 2017
Google Outlines SSL Apocalypse for Symantec Certificates
26 Jul 2017
Industry reacts to Symantec certificate authority trust remediation
24 Jul 2017
Final removal of trust in WoSign and StartCom Certificates
12 Jul 2017
Google to Fully Distrust WoSign/StartCom SSL Certs in Chrome 61
20 Jun 2017
What are SSL Precertificates?
31 May 2017
Bulletproof TLS Newsletter #28 Let's Encrypt downtime
9 May 2017
HTTP to HTTPS Conversion: An Easy-To-Use Excel Checklist That Protects Your SEO Investment
4 May 2017
Certificate Transparency Deadline Moved to April 2018
29 Apr 2017
Symantec certificate authority offers counter-proposal to Google
21 Apr 2017
CAB/Forum Votes to Shorten Certificate Lifetime Validity Periods: How It Impacts You
19 Apr 2017
Frank Catucci PCI DSS v3.2 & Migrating from SSL and Early TLS v1.1
12 Apr 2017
Let’s Encrypt and Comodo issue thousands of certificates for phishing
11 Apr 2017
DNS record will help prevent unauthorized SSL certificates
5 Apr 2017
Ivan Ristic SSL Labs Distrusts WoSign and StartCom certificates
3 Apr 2017
CAB Forum Reduces Maximum Certificate Validity to 825 Days
23 Mar 2017
Google Reducing Trust in Symantec Certificates Following Numerous Slip-Ups
23 Mar 2017
PayPal Phishing Certificates Far More Prevalent Than Previously Thought
23 Mar 2017
The Latest on Certification Authority Authorization
14 Mar 2017
CAA Mandated by CA/Browser Forum
7 Mar 2017
Fingerprinting Technique Identifies Based On Intermediate Certificates
25 Feb 2017
Finding Reasonable Changes To SSL Certificate Validity
23 Feb 2017
Announcing the first SHA1 collision
31 Jan 2017
Communicating the Dangers of Non-Secure HTTP
29 Jan 2017
Certificate Transparency snags Symantec CA for improper certs
25 Jan 2017
Here’s Why 2017 Will be the Year of the Phish
15 Jan 2017
2017 – Looking Back, Moving Forward
13 Jan 2017
Google Security Blog: Security Through Transparency
12 Jan 2017
Software Bug Forces GoDaddy To Revoke And Re-Issue SSL Certificates To Customers
7 Jan 2017
Taking a Closer Look at the SSL Handshake
4 Jan 2017
More Bad Security Advice From Companies Who Should Know Better
19 Dec 2016
Facebook Releases Free Certificate Transparency Monitoring Tool
13 Dec 2016
SSL: Deceptively Simple, Yet Hard to Implement
10 Dec 2016
No, It’s Not Okay To Ignore Certificate Warnings
30 Nov 2016
Bulletproof TLS Newsletter #22: TLS 1.3 in final stages and SHA-1 deprecation
23 Nov 2016
It’s the final countdown for SHA-1 SSL certificates
22 Nov 2016
The Web Is Moving From HTTP to HTTPS
17 Nov 2016
SHA-1 Certificates in Chrome
16 Nov 2016
Chrome to Fix Common Name Mismatch Error
13 Nov 2016
Trust on the Public Web – The Consequences of Covert Action
4 Nov 2016
Here’s to more HTTPS on the web!
3 Nov 2016
Why Browser Vendors Chose to Distrust 2 Certificate Authorities
1 Nov 2016
Google Distrusting WoSign and StartCom Certificates
30 Oct 2016
Google Certificate Transparency (CT) to Expand to All Certificates Types
27 Oct 2016
5 best practices for switching to HTTPS
27 Oct 2016
HTTP/2 Update
19 Oct 2016
Why Is Certificate Expiration Necessary?
18 Oct 2016
Phasing Out SHA-1 on the Public Web
18 Oct 2016
Free SSL Providers Spark Unprecedented Growth in Encrypted Traffic
14 Oct 2016
GlobalSign security certificate foul-up knocks out secure websites
4 Oct 2016
Apple To Block WoSign Intermediate Certificates
1 Oct 2016
Always-On SSL
29 Sep 2016
SHA-1 SSL Certificates
29 Sep 2016
Mozilla no longer trusts WoSign and StartCOM
7 Sep 2016
Aruba products contain compromised HTTPS certificate
2 Sep 2016
WoSign's secret purchase of StartCom
26 Aug 2016
Trust Indication Change in Google Chrome
25 Aug 2016
HTTPS and OpenVPN face new attack that can decrypt secret cookies
28 Jul 2016
Minimum Requirements for Code Signing Certificates
23 Jun 2016
Let's Encrypt: Defending Our Brand
9 Jun 2016
DROWN abuses SSL v2 to attack TLS
10 Apr 2016
SSL 2.0 and DROWN
30 Mar 2016
HTTP Public Key Pinning: You’re doing it wrong!
29 Mar 2016
Debunking SSL and HTTPS Security Myths
28 Mar 2016
Flaw in StartSSL Validation Allowed Attackers to Get SSL Certs for Any Domain
22 Mar 2016
Secure websites shun HTTP Public Key Pinning
17 Mar 2016
95% of HTTPS servers vulnerable to trivial MITM attacks
8 Mar 2016
It’s 2016, and we’re still not using HTTPS properly
3 Mar 2016
HTTPS SEO Checklist
1 Mar 2016
The DROWN Attack
4 Feb 2016
Moving to Always on HTTPS, Part 1 of 2; Marking HTTP as Unsecure
23 Jan 2016
Amazon makes it easier to encrypt sites and services on AWS with free SSL certificates
22 Jan 2016
Free Amazon SSL certificates' value is a matter of trust
11 Jan 2016
US military still SHAckled to outdated DoD PKI infrastructure
7 Jan 2016
What Happened With Crypto This Year? 2015 in Review
7 Jan 2016
Malvertising campaign used a free certificate from Let's Encrypt
21 Dec 2015
An update on SHA-1 certificates in Chrome
11 Dec 2015
Proactive measures in digital certificate security
8 Dec 2015
Private key for *.xboxlive.com certificate disclosed
27 Nov 2015
Dell’s eDellRoot certificate screw-up – what dazed admins need to know
30 Oct 2015
Sustaining Digital Certificate Security
28 Oct 2015
Google Pushes Transparency for SSL Certificates
25 Oct 2015
As sites move to SHA2 encryption, millions face HTTPS lock-out
20 Oct 2015
Better SSL Error Indicators to Be Added in Firefox 44
19 Oct 2015
One million SSL certificates still using “insecure” SHA-1 algorithm
13 Oct 2015
Fraudsters use paypal-office.com OV certificate for phishing
12 Oct 2015
Implementing the TLS Maturity Model
12 Oct 2015
Certificate authorities issue SSL certificates to fraudsters
12 Oct 2015
SHA-1 hashing algorithm could succumb to $75K attack, researchers say
1 Oct 2015
Expired certificates cost businesses $15 million per outage
21 Sep 2015
Introducing Lemur
17 Sep 2015
Disabling SSLv3 and RC4
17 Sep 2015
How Mixed Content Compromises Security
17 Sep 2015
The perils of free digital certificates
16 Sep 2015
Let's Encrypt certificate authority signs first cert
16 Sep 2015
Bulletproof SSL Newsletter #8
20 Aug 2015
SSL Server Compliance Timeline
14 Aug 2015
Benefits of Public Key Pinning
12 Aug 2015
Would you buy an SSL certificate from this man?
11 Jul 2015
OpenSSL High Severity Vulnerability
24 Jun 2015
New Directions for Elliptic Curve Cryptography in Internet Protocols
12 Jun 2015
OpenSSL Patches Six Security Vulnerabilities
11 Jun 2015
State-run SSL certificate authorities make Congress nervous about web security
10 Jun 2015
Amazon wants to be your SSL certificate provider, applies to be a root Certificate Authority
9 Jun 2015
SSL Labs: Increased penalty when TLS 1.2 is not supported
3 Jun 2015
Server Name Indication and Fewer IP Addresses
20 May 2015
The Logjam TLS Attack
19 May 2015
How Symantec upsells Internet Explorer 5 SSL support in 2015
14 May 2015
Counting SSL certificates
10 May 2015
Mozilla Pushes Web Sites To Adopt Encryption
1 May 2015
Deprecating Non-Secure HTTP
29 Apr 2015
Why You Should Get Familiar With TLS If You Accept Credit Cards
24 Apr 2015
Bulletproof SSL and TLS Book
24 Apr 2015
Apple at the Core of New SSL Vulnerability
23 Apr 2015
SSL Pulse - Survey of the SSL Implementation of the Most Popular Web Sites
20 Apr 2015
HTTP/2 Is Speedy and Secure
16 Apr 2015
EV Certificate Infographic
13 Apr 2015
SSL flaw forces Mozilla to pull Opportunistic Encryption
13 Apr 2015
Microsoft Deploys Certificate Reputation
3 Apr 2015
Fighting the Good Fight for Online Trust
1 Apr 2015
Understanding OCSP Times and What They Mean for You
27 Mar 2015
Cipherli.st Strong Ciphers for Apache, nginx and Lighttpd
24 Mar 2015
Google warns of unauthorized TLS certificates trusted by almost all OSes
22 Mar 2015
Microsoft warns of fake SSL certificate for Windows Live
18 Mar 2015
Is Your SSL Server Vulnerable to a FREAK Attack?
18 Mar 2015
Bogus SSL certificate for Windows Live could allow man-in-the-middle hacks
5 Mar 2015
FREAK Attack: What You Need to Know
3 Mar 2015
PrivDog Poses Bigger Risk Than Superfish
1 Mar 2015
CloudFlare Launches Security Features on ‘SSL Week’ Aimed at Making Web Security Easier and Cheaper
1 Mar 2015
The end for 1024-bit SSL certificates is near, Mozilla kills a few more
24 Feb 2015
Why do people ignore security warnings when browsing the web?
24 Feb 2015
SSL-busting adware: US cyber-plod open fire on Comodo's PrivDog
24 Feb 2015
“SSL hijacker” behind Superfish debacle imperils large number of users
21 Feb 2015
SSL Certificate Validity Periods Limited to 39 Months Starting in April
20 Feb 2015
Lenovo PCs ship with man-in-the-middle adware that breaks HTTPS connections
6 Feb 2015
Google's Certificate Transparency Project Gains New Backers
30 Jan 2015
The end for 1024-bit SSL certificates is near, Mozilla kills a few more
5 Jan 2015
Gogo Inflight Internet is intentionally issuing fake SSL certificates
9 Dec 2014
POODLE bites TLS
6 Dec 2014
Certificate Transparency Required for EV Certificates to Show Green Address Bar in Chrome
3 Dec 2014
Will New Free Certificate Authority Help Or Hinder Online Security?
30 Nov 2014
’Tis the Season for Online Safety
25 Nov 2014
Introducing nogotofail—a network traffic security testing tool
21 Nov 2014
A Follow-up on POODLE and SSL 3.0
19 Nov 2014
The Cost of Creating Collisions Using SHA-1
18 Nov 2014
EFF, Mozilla back new certificate authority that will offer free SSL certificates
11 Nov 2014
Infographic: Switching to SHA-2 SSL
5 Nov 2014
Google puts down POODLE, now wants to eradicate breed
30 Oct 2014
Extra Trips are for Frequent Flyers, Not SSL/TLS Performance
21 Oct 2014
Code Signing Baseline Requirements
17 Oct 2014
SSL 3 is dead, killed by the POODLE attack
15 Oct 2014
Google’s POODLE affects oodles
9 Oct 2014
Secure Your Website with HSTS
7 Oct 2014
3 Critical Mistakes to Avoid When Migrating to SHA-2
1 Oct 2014
CloudFlare offers free SSL to its customers
19 Sep 2014
CloudFlare's Keyless SSL Takes New Approach to Cloud Security
19 Sep 2014
Ignore SSL certificates and clients may ignore you
17 Sep 2014
DigiCert Releases Tool to Simplify SHA-2 Migration for System Administrators
12 Sep 2014
SHA1 deprecation: what you need to know
9 Sep 2014
Latest Firefox adds protection against rogue SSL certificates
5 Sep 2014
Latest Firefox version adds protection against rogue SSL certificates
5 Sep 2014
Hundreds of Android apps open to SSL-linked intercept fail
31 Aug 2014
Google Plans to Deprecate SHA-1 Certificates
16 Aug 2014
Certificate Authority Security Council backs SSL server rules taking effect Nov. 1
13 Aug 2014
What does the switch from HTTP to HTTPS mean for startups?
8 Aug 2014
Bulletproof SSL and TLS has been released!
8 Aug 2014
Google To Factor Security In Search Results
26 Jul 2014
Microsoft revokes trust in certificate authority operated by the Indian government
26 Jul 2014
New SSL server rules go into effect Nov. 1
28 Jun 2014
Bulletproof SSL and TLS June Update: Cryptography, Protocol, and PKI
16 Jun 2014
Benefits of Elliptic Curve Cryptography
16 Jun 2014
SSL Pulse: 49% vulnerable to CVE-2014-0224, 14% exploitable
7 Jun 2014
OpenSSL Team Warns of New MITM Vulnerability
5 Jun 2014
SSL Review for May 2014
29 May 2014
SSL After The Heartbleed
9 May 2014
CASC Heartbleed Response
9 May 2014
Keys left unchanged in many Heartbleed replacement certificates!
29 Apr 2014
Mozilla Offers $10,000 Bounty For Bugs In New SSL Certificate Library
27 Apr 2014
Mozilla Aims to Improve Firefox Browser SSL Security
25 Apr 2014
Heartbleed: Why aren’t certificates being revoked?
23 Apr 2014
Apple patches serious 'triple handshake' bug with iOS 7.1.1, OS X updates
19 Apr 2014
Heartbleed Aftershock: The New Certificate Threat
17 Apr 2014
Netcraft releases Heartbleed indicator for Chrome, Firefox, and Opera
12 Apr 2014
Perfect Forward Secrecy
12 Apr 2014
Heartbleed certificate revocation tsunami yet to arrive
11 Apr 2014
Protect Yourself Against Heartbleed, The Web's Security Disaster
11 Apr 2014
Lagging Android devices vulnerable to Heartbleed
10 Apr 2014
All Your Most Pressing Heartbleed Questions Answered
10 Apr 2014
The Simple Security Measure That Could Have Stopped Heartbleed Dead
9 Apr 2014
Half a million widely trusted websites vulnerable to Heartbleed bug
19 Mar 2014
HTTPS mixed content: still the easiest way to break SSL
18 Mar 2014
CA Security Council Members Presentation at RSA 2014 Conference
16 Mar 2014
Researchers Find SSL Problems in WhatsApp
15 Mar 2014
New NSA Slides Reveal Tailored Access Run Amok
13 Mar 2014
Think Twice Before Using DV for E-Commerce
12 Mar 2014
Significant SSL/TLS improvements in Java 8
11 Mar 2014
Certificate Reputation
10 Mar 2014
GnuTLS Certificate Verification Flaw Exposes Linux Distros, Apps to Attack
6 Mar 2014
SSL TLS HTTPS Web Server Certificate Fingerprints
3 Mar 2014
2014 – Looking Back, Moving Forward
24 Feb 2014
SSL Labs: Testing for Apple's TLS authentication bug
21 Feb 2014
Bogus SSL Certificates
16 Feb 2014
Fake SSL certificates deployed across the internet
7 Feb 2014
Always-On SSL, Part II
7 Feb 2014
Certificate Transparency: Small Town Gossip Can Save Web Users' Privacy
6 Feb 2014
Always-On SSL, Part II
4 Feb 2014
NIST continues using SHA-1 algorithm after banning it
31 Jan 2014
Why We Need to Move to SHA-2
17 Jan 2014
Always-On SSL, Part I
12 Jan 2014
Intermediate CA Certificates and Their Potential For Misuse For Man-In-The-Middle Attacks
6 Jan 2014
2014 – Looking Back, Moving Forward
17 Dec 2013
SHA-1 Deprecation, On to SHA-2
9 Dec 2013
Google Finds Fake Certificates Issued By ANSSI
1 Dec 2013
HSTS – The missing link in Transport Layer Security
27 Nov 2013
Hardening Your Web Server’s SSL Ciphers
23 Nov 2013
How Organizations Are Authenticated for SSL Certificates
20 Nov 2013
UPDATE: Encrypt the Web Report: Who's Doing What
20 Nov 2013
Google strengthens its SSL configuration against possible attacks
14 Nov 2013
Next-gen HTTP 2.0 protocol will require HTTPS encryption (most of the time)
16 Oct 2013
Certificate Authority Audits and Browser Root Program Requirements
16 Oct 2013
US Government aiding spying… against itself
8 Oct 2013
Changes to Google Chrome and Chrome OS certificate handling
3 Oct 2013
Introducing the SSL Client Test
28 Sep 2013
What is Certification Authority Authorization?
24 Sep 2013
Certificate Authorities struggle to comply with Baseline Requirements
20 Sep 2013
It’s Time for TLS 1.2
18 Sep 2013
Updated SSL/TLS Deployment Best Practices deprecates RC4
14 Sep 2013
Encryption Still Works – It’s About How You Implement It
10 Sep 2013
Is BEAST still a threat?
6 Sep 2013
Deceptive domain and SSL certificate issued by Network Solutions
6 Sep 2013
Perfect Forward Secrecy in the Netcraft Extension
30 Aug 2013
Google to Implement 5-Year Limit on Digital Certificates
29 Aug 2013
Public Key Pinning
29 Aug 2013
Are we heading for a 'cryptopocalypse'?
24 Aug 2013
Mozilla considers rejecting long-lived digital certificates following similar decision by Google
16 Aug 2013
Increasing DHE strength on Apache 2.4.x
14 Aug 2013
Firefox 23 Blocks Mixed Content
8 Aug 2013
Defending against the BREACH attack
13 Jul 2013
Speeding up SSL: enabling session reuse
12 Jul 2013
Why is nobody using SSL client certificates?
28 Jun 2013
Getting the Most Out of SSL Part 2: Configuration
27 Jun 2013
Opera Software Attacked, Code Signing Cert Stolen
25 Jun 2013
SSL: Intercepted today, decrypted tomorrow
25 Jun 2013
SSL Labs: Deploying Forward Secrecy
8 Jun 2013
Phishing attack hosted on police site with an SSL certificate
5 Jun 2013
Some Comments on Web Security
27 May 2013
Google builds bigger crypto keys to make site forgeries harder
25 May 2013
OCSP Server Performance in April 2013
25 May 2013
Would you knowingly trust an irrevocable SSL certificate?
25 May 2013
Announcing Bulletproof SSL/TLS and PKI
17 May 2013
CAs Support Standards and Regulations
15 May 2013
What the ICANN SSAC Report Doesn’t Tell You
13 May 2013
How certificate revocation (doesn’t) work in practice
27 Apr 2013
Certificate revocation and the performance of OCSP
27 Apr 2013
SSL/TLS Deployment Best Practices
27 Apr 2013
A Beginners guide to SSL
22 Mar 2013
SSL Co-Author Reflects on Crypto Success and Failure
22 Mar 2013
RC4 in TLS is broken: Now what?
14 Feb 2013
Major Certificate Authorities Unite In The Name Of SSL Security
14 Feb 2013
Symantec claims massive security boost for new SSL certificate
8 Feb 2013
A brief chronology of SSL/TLS attacks
8 Feb 2013
SSL Labs update increases security requirements
4 Feb 2013
Lucky Thirteen attack on TLS CBC
25 Jan 2013
5 easy tips to accelerate SSL
8 Jan 2013
Revoking Trust in Two TurkTrust Certificates
3 Jan 2013
Enhancing digital certificate security (Fake google.com cert issued)
31 Dec 2012
HTTP Strict Transport Security
9 Dec 2012
Web served, part 2: Securing things with SSL/TLS
9 Nov 2012
A Fort Knox for Web crypto keys: Inside Symantec's SSL certificate vault
3 Nov 2012
Preloading HSTS
30 Oct 2012
OCSP Stapling: How CloudFlare Just Made SSL 30% Faster
25 Oct 2012
The most dangerous code in the world: validating SSL certificates in non-browser software
16 Oct 2012
Evaluating the Need and Implications of Server Gated Cryptography
2 Oct 2012
CRIME: Information leakage attack against SSL/TLS
30 Sep 2012
How does SSL work?
22 Sep 2012
Phishing Alerts for Certificate Authorities
15 Sep 2012
CRIME: Information leakage attack against SSL/TLS
12 Sep 2012
Minimum RSA public key lengths: guidelines or rules?
1 Sep 2012
Governments and banks still using weak MD5-signed SSL certificates
25 Aug 2012
Inside Symantec's secret SSL Certificate Vault
23 Aug 2012
Phishing on sites using SSL Certificates
23 Aug 2012
NIST advises organizations to prepare for CA compromises
16 Aug 2012
Microsoft SmartScreen & Extended Validation (EV) Code Signing Certificates
11 Aug 2012
Entrust Leaves CA/Browser Forum, Cites New IP Rights Policy
30 Jul 2012
SSL in not about Encryption
26 Jul 2012
Living with HTTPS
27 Jun 2012
New TLS versions
31 May 2012
Ivan Risti?: My Infosecurity London 2012 SSL Panel Notes
15 May 2012
What’s New in IIS 8
2 May 2012
Announcing SSL Pulse
27 Apr 2012
Most of the Internet's top 200,000 HTTPS websites are insecure, Trustworthy Internet Movement says
21 Apr 2012
Symantec: 'VeriSign Trusted' mark out, 'Norton Secured' in
18 Apr 2012
Microsoft is holding back the secure web
13 Apr 2012
False Start's Failure
9 Mar 2012
SSL and Browsers: The Pillars of Broken Security
5 Mar 2012
Solving The SSL Certificate-Revocation Checking Shortfall
27 Feb 2012
SSL fix aims to mend huge cracks in 'Net's foundation of trust
23 Feb 2012
Should All Web Traffic Be Encrypted?
23 Feb 2012
Announcing the SSL/TLS Deployment Best Practices guide
20 Feb 2012
Symantec criticises Google for stripping security certificate checks from Chrome
18 Feb 2012
Message to Certificate Authorities about Subordinate CAs
14 Feb 2012
Trustwave to escape 'death penalty' for SSL skeleton key
11 Feb 2012
PKI and SSL - the jaws of trust snap shut
10 Feb 2012
Mozilla Asked to Revoke Trustwave CA for Allowing SSL Eavesdropping
8 Feb 2012
Trustwave revokes "MitM" certificate, vows never to issue one again
7 Feb 2012
Revocation checking and Chrome's CRL
27 Jan 2012
Is SSL Cert Holder ID Verification A Joke?
20 Jan 2012
SSL is not about encryption
9 Jan 2012
Smart meter SSL screw-up exposes punters' TV habits
5 Jan 2012
Phishing sites using Extended Validation SSL
4 Jan 2012
Google Chrome HTTPS Address Bar Spoofing
17 Dec 2011
GlobalSign Security Incident Report
17 Dec 2011
CA/Browser Forum Approves Baseline Requirements for SSL/TLS Certificates
6 Dec 2011
Introducing DNSCrypt
23 Nov 2011
Forward secrecy for Google HTTPS
8 Nov 2011
KPN Stops Issuing SSL Certificates After Possible Breach
4 Nov 2011
Revoking Trust in DigiCert Sdn. Bhd Intermediate Certificate Authority
3 Nov 2011
TLS Renegotiation and Denial of Service Attacks
25 Oct 2011
Duqu: Protect Your Private Keys
23 Oct 2011
Google: Making Search More Secure
7 Oct 2011
VeriSign Authentication and Symantec Unite
26 Sep 2011
SSL Survey: How many sites support TLS 1.1 and better?
25 Sep 2011
Tor and the BEAST SSL attack
25 Sep 2011
CAs Need to Invest in Infrastructure, Stronger Business Processes
22 Sep 2011
CA DigiNotar bankrupt after SSL certificate debacle
15 Sep 2011
Symantec cloud-based service seeks out 'rogue certificates'
14 Sep 2011
Mozilla Tells SSL Certificate Authorities to Shape Up
14 Sep 2011
SSL Certificate Scandal Exposes Bug in Mac OS X
8 Sep 2011
DigiNotar Removal Follow Up
6 Sep 2011
GlobalSign temporarily ceases cert issuance
6 Sep 2011
"There is no any hardware or software in this world exists which could stop my heavy attacks"
1 Sep 2011
Iran forged the wrong SSL certificate
30 Aug 2011
Fraudulent *.google.com Certificate
29 Aug 2011
Javascript Cryptography Considered Harmful
19 Aug 2011
A Stick Figure Guide to the Advanced Encryption Standard (AES)
18 Aug 2011
First dent in the AES crypto algorithm
18 Aug 2011
SSL patch for jailbroken iPhones
18 Aug 2011
So, what really breaks SSL?
13 Jul 2011
nginx does not suck at ssl after all
11 Jul 2011
GoDaddy SSL Cert Scam
11 Jul 2011
nginx sucks at ssl
28 Jun 2011
Q&A: Chris Bailey of AffirmTrust on the new SSL Cerficiate Authority
27 Jun 2011
SSL Session Caching (in nginx)
27 Jun 2011
Popular, but sluggish secure server? Popularity might not be the reason
26 Jun 2011
Google Chrome Now Blocks Insecure Scripts on HTTPS
20 Jun 2011
Attack on Israeli Certificate Authority, StartCom
18 Jun 2011
DNSSEC authenticated HTTPS in Chrome
3 Jun 2011
FaceNiff For Android Hijacks Facebook Sessions with One Tap
25 May 2011
New hack on Comodo reseller exposes private data
25 May 2011
A study of what really breaks SSL
19 May 2011
SSL FalseStart Performance Results
4 May 2011
Public key pinning for Google Chrome
29 Apr 2011
Fresh Internet SSL Survey results (April 2011) available
22 Apr 2011
'HTTPS Now' Campaign Urges Users to Take an Active Role in Protecting Internet Security
18 Apr 2011
Apple finally updates Safari to deal with fake Comodo SSL certificates
13 Apr 2011
SSL And The Future Of Authenticity
13 Apr 2011
CA/Browser Forum releases draft Baseline Requirements for SSL
4 Apr 2011
Improving SSL certificate security
3 Apr 2011
Vulnerability Arbitration
30 Mar 2011
Comodo Inspires No Confidence as Hacker Compromises Two More Accounts
28 Mar 2011
Comodo Hacker Releases Mozilla Private Key
27 Mar 2011
The Comodo hacker releases his manifesto
27 Mar 2011
A message from Comodo Hacker
26 Mar 2011
Mozilla regrets keeping quiet on SSL certificate theft
24 Mar 2011
Firm points finger at Iran for SSL certificate theft
23 Mar 2011
Browsers vulnerable to fraudulent SSL certificates
17 Mar 2011
Making Twitter more secure: HTTPS
17 Mar 2011
CyaSSL - An Embedded SSL Library for Devices
7 Mar 2011
Charlie Sheen Needs SSL
7 Mar 2011
A sense of false security
10 Feb 2011
Dispelling the New SSL Myth
31 Jan 2011
Top 7 Myths about HTTPS
29 Jan 2011
How to Make a Secure Login Form with SSL
27 Jan 2011
Why Should I Care About HTTPS on Facebook (or Other Web Sites)?
24 Jan 2011
SSL is not about encryption
19 Jan 2011
Yes, browsers do cache SSL resources, so please use Google's CDN
19 Jan 2011
Unfortunate current practices for HTTP over TLS
7 Jan 2011
Tunisia Gov Executed MITM Attack on Unencrypted Logins
6 Jan 2011
Dan Kaminsky responds (at length) to DJB's 27C3 DNSSEC presentation
3 Jan 2011
Multi-domain UCC SSL certificates on Nginx with 1 IP address
23 Dec 2010
Is Customer Service Important for SSL Certificate Providers?
19 Dec 2010
LittleBlackBox - Database of private SSL keys for embedded devices
11 Dec 2010
How to Disable Weak Ciphers and SSL 2.0 in Tomcat
11 Dec 2010
How to Disable Weak Ciphers and SSL 2.0 and SSL 3.0 in Apache
11 Dec 2010
Free trial certificates now available on trusted roots
8 Dec 2010
Firesheep Fix as Easy as HTTPS
29 Nov 2010
SSL with Rails
27 Nov 2010
Gain Trust Online Using Trust Seals
24 Nov 2010
SSL Certificates For Intranet Sites?
10 Nov 2010
How to create and link an SSL certificate chain for a Citrix Netscaler
1 Nov 2010
Firesheep and HSTS (HTTP Strict Transport Security)
25 Oct 2010
Firesheep Should Be A Call To Arms For System, Network & Web Admins
23 Oct 2010
How to Create a Self Signed Certificate in IIS 7
18 Oct 2010
Venafi Survey: 78% of Organizations Experienced Downtime Due to Mismanaged Encryption This Year
16 Oct 2010
How to Create and Install an Apache Self Signed Certificate
10 Oct 2010
Unlimited Licenses and Lower Prices from GeoTrust partners!
10 Oct 2010
Qualys SSL Labs releases raw data from the Internet SSL survey
18 Aug 2010
Experts Warn of a Weak Link in the Security of Web Sites
11 Aug 2010
Symantec Completes Acquisition of VeriSign’s Security Business
10 Aug 2010
Enable TLS 1.2 (AES-256/SHA-256) in IIS 7.5, Server 2008 R2, Windows 7
7 Aug 2010
DEFCON Presentation: The EFF SSL Observatory
3 Aug 2010
Venafi Encryption Director Applauded for Encryption Policy Management by SC Magazine
30 Jul 2010
Internet SSL Survey 2010 is here!
21 Jul 2010
VeriSign Adds Web Site Malware Scanning To Certificates
28 Jun 2010
SSL Certificates In Use Today Aren't All Valid
24 Jun 2010
Comodo says VeriSign’s SSL processes vulnerable to attack
23 Jun 2010
Comodo, cut it out already!
23 Jun 2010
Incorrect reports of VeriSign vulnerability
20 Jun 2010
Search more securely with Google Secure Search over SSL
18 Jun 2010
Firefox Extension HTTPS Everywhere Does What It Sounds Like
1 Jun 2010
Arrgh! Yer Certificate Be Broken Matey!
25 May 2010
Benefits of Google Encrypted Search
24 May 2010
A New Type of Phishing Attack
20 May 2010
SSLCertScanner: A Network Based SSL Certificate Scanner
20 May 2010
VeriSign to Sell Authentication Services Business to Symantec for $1.28 Billion
17 May 2010
Deep protocol and cipher suite testing in SSL Labs
11 May 2010
FTC commissioner demands web sites implement SSL for all sensitive data
3 May 2010
Have an online store? What you need to do by July 1.
30 Apr 2010
The Myths of Website security, SSL, and the padlock symbol
17 Apr 2010
SSL For Newbs
15 Apr 2010
VeriSign Exceeds 2 Billion Certificate Checks in a Single Day
7 Apr 2010
Removing the RSA Security 1024 V3 Root
3 Apr 2010
How to set up OpenSSH on Windows
1 Apr 2010
Is it "trivially easy" to get a cert for a domain you don't own?
29 Mar 2010
OpenSSL 1.0.0 Released
29 Mar 2010
Life without Certificate Authorities
26 Mar 2010
Certified Hype: Government Interception Attacks Against SSL
24 Mar 2010
Your health, tax, and search data siphoned
24 Mar 2010
Law Enforcement Appliance Subverts SSL
18 Mar 2010
'Severe' OpenSSL vuln busts public key crypto
9 Mar 2010
Explanation from HSBC on why they use EV certificates
6 Mar 2010
Do I Need An SSL Certificate For My Website?
6 Mar 2010
New browser reports over half of SSL sites may be unsafe
6 Mar 2010
New Paper: SSL/TLS Hardening and Compatibility report 2010
4 Mar 2010
Three years of EV
1 Mar 2010
IIS7 Redirect HTTP to HTTPS
25 Feb 2010
VeriSign Launches Seal Of Approval For Non-Transactional Sites
24 Feb 2010
Apache Redirect HTTP to HTTPS using mod_rewrite
21 Feb 2010
Why SSL? The Purpose of using SSL Certificates
15 Feb 2010
Simple Exchange server certificate management
15 Feb 2010
Bank being sued for failing to protect against phishing
10 Feb 2010
Microsoft Security Advisory - Vulnerability in TLS/SSL Could Allow Spoofing
2 Feb 2010
Botnet targets major Web sites with junk SSL connection
27 Jan 2010
Managing SSL Certificate Authorities on OS X
24 Jan 2010
Certificate Authority provides free certificates
23 Jan 2010
Cheap SSL Providers (Who is the cheapest SSL Provider?)
21 Jan 2010
IIS Private Keys Unexportable? Yeah, right
15 Jan 2010
The Future Of SSL
14 Jan 2010
How to Render SSL Useless
14 Jan 2010
Only 27% of Organizations Use Encryption
14 Jan 2010
Default https access for Gmail
12 Jan 2010
Extended Validation EV SSL Certificates – Should Your Website Have One?
12 Jan 2010
MarketVibe SSL Myths
11 Jan 2010
Fix finalized for SSL protocol hole
8 Jan 2010
Factorization of a 768-Bit RSA Modulus
7 Jan 2010
Is it Paypal? Or is it Paypal?
28 Dec 2009
Configuring SNI with NginX
24 Dec 2009
GoDaddy Changes SSL Policy Without Warning
20 Dec 2009
Converting RSA keys
17 Dec 2009
VeriSign SSL Web Pages Refreshed
15 Dec 2009
Reacting to Security Vulnerabilities
15 Dec 2009
A guide to Facebook security and privacy
15 Dec 2009
Phishing attacks now target smartphone users, security experts say
10 Dec 2009
12 Critical Tips for Safe Online-Shopping During the Holidays
10 Dec 2009
Securing the Enterprise
29 Nov 2009
How fast are Debian-flawed certificates being re-issued?
24 Nov 2009
Understanding the TLS Renegotiation Attack
16 Nov 2009
VeriSign: Major internet security update by 2011
15 Nov 2009
Researcher busts into Twitter via SSL reneg hole
15 Nov 2009
Not just CSRF: SSL Authentication Gap used for credentials theft
12 Nov 2009
MashSSL Alliance Formed to Promote Open Standard for Trust Establishment Between Web Applications
12 Nov 2009
idAlliance Corporation Releases iManageCerts(TM) Certificate Management Tool
12 Nov 2009
Expert calls SSL protocol vulnerability a non issue
10 Nov 2009
My take on the SSL MITM Attacks
5 Nov 2009
SSL and TLS Renegotiation Vulnerability Discovered
4 Nov 2009
StartSSL: a Certification Authority with a heart
28 Oct 2009
Should SSL be enabled on every website?
25 Oct 2009
10 common network security design flaws
21 Oct 2009
Man in the Middle Fun with SSL Strip - Hak5
15 Oct 2009
Refute the FUD
15 Oct 2009
Truth, Fiction and HTTPS
8 Oct 2009
SSL Still Mostly Misunderstood
6 Oct 2009
Null-Prefix SSL Certificate For PayPal Released
3 Oct 2009
SSL trick certificate published
30 Sep 2009
tls.woodgrovebank.com meets the browsers
29 Sep 2009
Thawte Shuts Down Free Email Certificates
27 Sep 2009
Microsoft Adds Support for StartCom Certificates
27 Sep 2009
The overengineering and non-deployment of SSL/TLS
27 Sep 2009
Go Daddy on Pace to Become Largest SSL Provider in the World
20 Sep 2009
How SSL-encrypted Web connections are intercepted
20 Sep 2009
Microsoft Internet Explorer SSL security hole lingers
16 Sep 2009
Email Certificates (SMIME Certificates)
13 Sep 2009
Identity theft growing, getting harder to stop
13 Sep 2009
SSL Threat Model
27 Aug 2009
Requiring SSL For ASP.NET MVC Controllers
24 Aug 2009
StartCom to be Supported in IE Next Month
24 Aug 2009
Google Webmaster Tools Now Reporting SSL Certificate Errors
23 Aug 2009
Are you secure buying online?
9 Aug 2009
Black Hat 2009 SSL Review: Breaking the Myths of Extended Validation SSL Certificates
9 Aug 2009
jCryption Javascript HTML-Form Encryption Plugin
6 Aug 2009
Black Hat 2009 SSL Review: Black Ops of PKI (Dan Kaminsky)
6 Aug 2009
Researcher Exposes Flaws In Certificate Authority Web Applications
2 Aug 2009
TLS Server Name Indication now in Apache
2 Aug 2009
The First Few Milliseconds of an HTTPS Connection
2 Aug 2009
Hackers expose weakness in visiting trusted sites
2 Aug 2009
Web users ignoring security certificate warnings
26 Jul 2009
Security certificate warnings don't work, researchers say
26 Jul 2009
Can you have too much SSL?
26 Jul 2009
Public SSL Server Database Released
23 Jul 2009
EV SSL Browser Based Attack
16 Jul 2009
FUD: BlackHat talk raises questions about EV SSL
12 Jul 2009
Researchers to demonstrate new EV SSL man-in-the-middle hacks
5 Jul 2009
The analysis of Googlebot's frugal cipher suite list
1 Jul 2009
SSL Certificates in Firefox 3.5
28 Jun 2009
Crypto guru urges incentives for SSL cert recall
21 Jun 2009
Insecure Cookies and You: Perfect Together
21 Jun 2009
Google explains HTTPS security for web applications
21 Jun 2009
EV-SSL Gains Adoption, May Boost Web Sales
21 Jun 2009
Research Reveals 88 Percent of American Web Users Unable to Spot Phishing Sites
14 Jun 2009
Comodo and Instant SSL - Customer Service That Needs a Lot of Work
14 Jun 2009
Securing your SharePoint Sites with ISA 2006 using Forms Based Authentication
14 Jun 2009
Attacks on SHA-1 made even easier
14 Jun 2009
Go Green for Less...Entrust EV SSL Certificates Now Available for Price of Regular SSL Certificates
7 Jun 2009
Top 10 Malware Sites
7 Jun 2009
The difference between SSL and Hacker Safe seals
31 May 2009
Criminals using Comodo to attempt legitimacy
24 May 2009
Testing for weak SSL ciphers for security audits
24 May 2009
Pretty-Bad-Proxy Browser Vulnerabilities (mostly) Fixed
17 May 2009
Online Security: The Pros And Cons Of Going Green
15 May 2009
GlobalSign Announces Support for Transparent SSL Certificate Lifecycle Management at Microsoft TechEd 2009
10 May 2009
What is Code Signing?
4 May 2009
Pound Reverse-Proxy, Load-Balancer, and SSL Wrapper
26 Apr 2009
SSL Certificate Validity - How Digital Certificates Provide Assurance
26 Apr 2009
VeriSign Helps Minimize Downtime and Lost Business With New Certificate Discovery Module
18 Apr 2009
Using Open Source Projects to Build an SSL Accelerator
18 Apr 2009
Gartner Says Number of Phishing Attacks on U.S. Consumers Increased 40 Percent in 2008
14 Apr 2009
You know you're a computer security professional when...
5 Apr 2009
iPhone SSL Warning and Safari Phishing
5 Apr 2009
Verisign brings extra security to the iPhone
5 Apr 2009
iPhone 3.0 Supports EV SSL Certificates
5 Apr 2009
Reducing XSS by way of Automatic Context-Aware Escaping in Template Systems
2 Apr 2009
LDAP over SSL/TLS: How secure is your Directory?
29 Mar 2009
SSL Certificate Compatibility - What web browsers are compatible with your SSL certificate?
29 Mar 2009
SSL Acceleration and Offloading: What Are the Security Implications?
22 Mar 2009
SafeMashups Offers Secure Mashups using MashSSL
22 Mar 2009
Leading Security Experts to Unveil New Attacks Against EV-SSL During CanSecWest Presentation
22 Mar 2009
Comodo is shady
20 Mar 2009
IIS 7 SSL Certificate Renewal Pain
16 Mar 2009
Free SSL Certificates from a Free Certificate Authority
15 Mar 2009
GlobalSign Introduces EV SSL to Managed SSL Service
15 Mar 2009
Debugging Java SSL/TLS Connections
8 Mar 2009
VeriSign Celebrates the Two Year Anniversary of Extended Validation SSL
8 Mar 2009
How to use SSL / HTTPS effectively in your PHP website
8 Mar 2009
eBrand Media shares how to increase conversions by assuring customers
3 Mar 2009
The great digital certificate ripoff?
1 Mar 2009
Safari 4 - Beta and Extended Validation
26 Feb 2009
SSL Host Headers in IIS 7
24 Feb 2009
VeriSign Will Support DNSSEC In .com By 2011
22 Feb 2009
Moxie Marlinspike's New SSL Attack is Nothing New
22 Feb 2009
Security Researcher Kaminsky Pushes DNS Patching
16 Feb 2009
What is WebTrust for CAs (Certification Authorities)?
15 Feb 2009
How to decrypt SSL and TLS traffic using Wireshark
8 Feb 2009
One Million SSL Sites on the Web
8 Feb 2009
Setting Up Adobe Connect With SSL
1 Feb 2009
GoDaddy Captures 47 Percent of SSL Market
1 Feb 2009
DigiCert SSL Certificate Products Offer Multiplicity, Affordability and Compatibility
1 Feb 2009
Over 10,000 EV sites
1 Feb 2009
Insecurities in Secure Remote Access
25 Jan 2009
EV-aware browser share tops 70%
25 Jan 2009
What lesson do we learn from the Heartland breach?
25 Jan 2009
MD5 attack on Microsoft's Authenticode
25 Jan 2009
VeriSign Forgets to Renew an SSL Certificate
25 Jan 2009
VeriSign buys Certicom after RIM withdraws bid
24 Jan 2009
SSL Information Wants to be Free
18 Jan 2009
SSL VPN Servers
18 Jan 2009
Elliptic Curve Cryptography and OpenDS
18 Jan 2009
Configure RDP over SSL with SelfSSL - Secure your Windows Remote Connections
13 Jan 2009
SSL-enabled Name-based Apache Virtual Hosts with mod_gnutls
11 Jan 2009
Google adds HTTPS-only browsing to Chrome
11 Jan 2009
VeriSign Helps Educate Taxpayers About EV SSL in Light of IRS's New Security and Privacy Standards
6 Jan 2009
ASP to force HTTPS SSL
4 Jan 2009
Check SSL Certificates for the Vulnerable MD5 Algorithm
4 Jan 2009
How Hard is it to Get Your SSL Cert Right?
2 Jan 2009
Do the SSL Watchmen Watch Themselves?
30 Dec 2008
MD5 Weakness Allows Fake SSL Certificates To Be Created
28 Dec 2008
VeriSign Vs. Non-VeriSign SSL Certificates
23 Dec 2008
SSL Certificate for Mozilla.com Issued Without Validation
22 Dec 2008
Top 10 Ways to Save Money on SSL Certificates
21 Dec 2008
Corporate Problems with SSL
21 Dec 2008
Researcher: Poor SSL Implementations Leave Many Sites At Risk
21 Dec 2008
If I Have an SSL, Do I Need DNSSEC?
14 Dec 2008
SSL- Info - Check Supported SSL Ciphers
14 Dec 2008
Using SSL with GlassFish v2
14 Dec 2008
Setting up SSL for Lighttpd/Django
14 Dec 2008
Live Webcast: How Extended Validation SSL Certificates Benefit Your Web Site
14 Dec 2008
Introduction to TS(Terminal Services) Gateway Certificates
14 Dec 2008
Announcing "Browser Security Handbook"
14 Dec 2008
Flock has EV support
7 Dec 2008
Hackers Hijacked Large E-Bill Payment Site
7 Dec 2008
VeriSign seal displays hit an all-time high on Cyber Monday
7 Dec 2008
Protect your identity during the holiday shopping season
7 Dec 2008
Linux citrix client ssl error 61
30 Nov 2008
Extinction of Unchained SSL Certificates
30 Nov 2008
SSL Certificates and PCI Compliance
30 Nov 2008
"Mixed content warning", how I loathe thee!
30 Nov 2008
Comodo Second in EV SSL Market
30 Nov 2008
NetScaler supports the chaining of Intermediate SSL Certificates
23 Nov 2008
Extended Validation SSL Certificates: Scam or Vital?
23 Nov 2008
AOTA Credits Increased Online Consumer Trust in 2008 to EV SSL Certificate Adoption
16 Nov 2008
Safari now supports EV SSL certificates
16 Nov 2008
VeriSign Provides Yahoo! Shopping Merchants Cues to Advertise Security and Trust Within Search Listings
9 Nov 2008
How to Move or Copy an SSL Certificate from one Server to Another
9 Nov 2008
IRS requires EV SSL for online filing in 2009
9 Nov 2008
Scandinavian Design Online Sees Eight Percent Increase in Online Conversions With EV SSL Certificates From VeriSign
2 Nov 2008
Creating Self Signed SSL Certificates on IIS 6.0 and Windows Server 2003
2 Nov 2008
The Pirate Bay un-SSL
2 Nov 2008
Flagstar Bank Increases Signups by 10% Using EV SSL Certificates
2 Nov 2008
SSL Certificate Market Changes Hands
26 Oct 2008
Using a Client Certificate when Bridging SSL traffic from ISA Server
26 Oct 2008
Extended Validation SSL and increased ATV
26 Oct 2008
Malware? We don't need no stinking malware!
20 Oct 2008
Will the real website owner please stand up?
19 Oct 2008
The Risks In Wildcard Certificates
19 Oct 2008
Trade names in Extended Validation SSL Certificates
19 Oct 2008
How to Disable SSL 2.0 and SSL 3.0 in IIS 7
19 Oct 2008
Configure Apache2 with SSL
19 Oct 2008
Phishers, Virus Writers Exploit Global Financial Crisis
19 Oct 2008
SSL in Python 2.6
16 Oct 2008
UK Court Rejects Encryption Key Disclosure Defense
12 Oct 2008
All SSL News
12 Oct 2008
Over 60% of Web users on EV-aware browsers
10 Oct 2008
US Financial Quagmire Bringing Out the Scammers
5 Oct 2008
VeriSign's Tim Callan on TV
5 Oct 2008
Attention developers: Your SESSIONIDs are showing
5 Oct 2008
Kaminsky: DNS issue still major threat
28 Sep 2008
The Challenges of Extended Validation SSLs
28 Sep 2008
Phishing with EV SSL Certificates
28 Sep 2008
Chrome SSL Certificate Fun
28 Sep 2008
SSL Certificates and Outlook Anywhere with Exchange 2007 on Windows Server 2008
22 Sep 2008
Nevada Businesses Must Start Encrypting E-Mail By Oct. 1st
21 Sep 2008
View SSL Cipher details using CipherFox
21 Sep 2008
EV SSL Case Studies
21 Sep 2008
Do It Yourself SSL Guide
14 Sep 2008
Some Q&A from my recent Web seminar - part 1
14 Sep 2008
Automated HTTPS Cookie Hijacking
14 Sep 2008
GeoTrust and thawte roots now included in Opera
9 Sep 2008
How to Properly Provide Mixed HTTP and HTTPS Support
7 Sep 2008
SSL Certificates in Google Chrome
7 Sep 2008
EV SSL Certificates: So what’s the green URL all about?
7 Sep 2008
Using SSL in Apache for Certain Pages
3 Sep 2008
How Google Chrome supports EV SSL
2 Sep 2008
GlobalSign Introduces “Secure Everything” SSL Certificate
1 Sep 2008
Perspectives: Extension to change how Firefox handles SSL Certificates
1 Sep 2008
SSL Seminars and Podcasts
1 Sep 2008
Debating the Firefox SSL Certificate
24 Aug 2008
Fallacies of evaluating EV
24 Aug 2008
VeriSign to Extend SSL Security to Web Sites with Internationalized Domain Names
24 Aug 2008
My First EV SSL Journey
24 Aug 2008
Changes made by Google enable complete SSL encryption
22 Aug 2008
More Discussion About How Firefox 3 Handles SSL Certificates
18 Aug 2008
KeyCzar, an open source cryptographic toolkit is released
18 Aug 2008
Over 50% of browsers can now use EV SSL Certificates
10 Aug 2008
Firefox 3 developer explains "broken" SSL error pages
5 Aug 2008
Kaminsky DNS Flaw + Domain Validated SSL = Phisher's Paradise
5 Aug 2008
Do EV Certificates Just Enhance The Bottom Line?
4 Aug 2008
Don’t be a Victim of DNS Security Holes
4 Aug 2008
Is Mozilla's SSL policy bad for the Web?
27 Jul 2008
GlobalSign Launches SSL Deployment Technology
20 Jul 2008
What Would It Take To Have Open CA Authorities?
20 Jul 2008
Who is using the latest web browser?
6 Jul 2008
Google Releases Web Application Security Tool ratproxy
6 Jul 2008
SSL Added to Pirate Bay
1 Jul 2008
When are self-signed certificates acceptable?
30 Jun 2008
Low-tech SSL certificate maintenance
17 Jun 2008
Firefox 3 Released with EV Support
1 Jun 2008
Detect Bad Debian OpenSSL Certificates Using Firefox
26 May 2008
Lessons Learned from Debian's OpenSSL Flaw
18 May 2008
XSS vulnerability found on PayPal
18 May 2008
Woops! Debian's OpenSSL Security Flaw
18 May 2008
VeriSign Has Now Issued Over One Million SSL Certificates
11 May 2008
Firefox 3's Site Identification button
4 May 2008
Choosing an SSL Provider on Slashdot
27 Apr 2008
XSS and the 'Green Bar'
20 Apr 2008
Say No To SGC SSL Certificates
20 Apr 2008
PayPal: unsecure browsers = cars without seatbelts
20 Apr 2008
New phishing attack pretends to create a personal certificate
20 Apr 2008
EV SSL Info from Net.Finance
13 Apr 2008
VeriSign Secured Seal increases sales by 31%
13 Apr 2008
New Certificate Auto-Installation Tools from Comodo
13 Apr 2008
Is PCI Compliance working?
6 Apr 2008
Extended Validation SSL Certificate Gains Adoption
29 Mar 2008
Over 100 Credit Unions now have EV SSL Certificates
22 Mar 2008
Safari 3.1 released. No EV SSL Support.
21 Mar 2008
OpenSSL CSR Wizard
21 Mar 2008
SSL Certificate Authority Review Contest ($50 Gift Certificate)
16 Mar 2008
Will Code Signing Certificates go EV?
16 Mar 2008
Flash + SSL + IE = WTF
16 Mar 2008
SSL certificates don't guarantee safety
9 Mar 2008
SSL Certificate Renewal: Even Google Forgets
9 Mar 2008
Internet shoppers clueless on web security
6 Mar 2008
Is XSS more harmful with Extended Validation certificates?
3 Mar 2008
VeriSign introduces the 'Cart Whisperer'
24 Feb 2008
Firefox 3 Beta 3 Introduces Support for EV Certificates
24 Feb 2008
EV Certificates and Web 2.0 Security
17 Feb 2008
Prehistoric Phishing
17 Feb 2008
EV SSL Press Releases
17 Feb 2008
Happy Birthday EV SSL Certificates!
10 Feb 2008
Italian Bank's XSS Opportunity Seized by Fraudsters
3 Feb 2008
SSL doesn't protect Google Mail?
27 Jan 2008
Internet Explorer to autoupdate to IE7
20 Jan 2008
AOTA Endorses EV SSL Certificates
20 Jan 2008
More Than 2,000 Web Sites Reassure Online Users With VeriSign Extended Validation
6 Jan 2008
Look at Go Daddy's SSL Market Share 'Grow Daddy Grow!'
6 Jan 2008
Automatically Switch Between HTTP and HTTPS in .NET
30 Dec 2007
Explaining EV SSL Certificates to Customers
23 Dec 2007
New SSL Book: The Shortcut Guide to Extended Validation SSL Certificates
23 Dec 2007
Digital Certificates: Do They Work?
16 Dec 2007
SSL Certificate: Why Verify Domain Ownership?
9 Dec 2007
Shopping for the right SSL: What are the options?
9 Dec 2007
Overstock.com EV SSL Certificate Case Study
9 Dec 2007
150 Million VeriSign Seals Viewed on Cyber Monday
9 Dec 2007
How Do Security Measures Boost Conversion?
9 Dec 2007
VeriSign touts EV SSL features in Firefox 3 and IE 7
8 Dec 2007
How To Configure SSL Host Headers in IIS 6
25 Nov 2007
Merchant Risk Council Recommends Extended Validation SSL Certificates
25 Nov 2007
Root Certificate Programs
18 Nov 2007
What is weak SSL encryption?
4 Nov 2007
The Top 5 SSL Tools
28 Oct 2007
Online trading site was left wide open
21 Oct 2007
Browsers and SSL Support
14 Oct 2007
Look for the small padlock, not the big one
8 Oct 2007
Enable SSL for Google Analytics
23 Sep 2007
Forcing SSL In IIS
23 Sep 2007
VeriSign's Extended Validation Demos
16 Sep 2007
Live Webcast: How IE7 and New EV SSL Certificates Impact Your Site
2 Sep 2007
The Double V Phishing Attack
26 Aug 2007
Are extended validation certs worth the extra money?
26 Aug 2007
Network Solutions Releases SSL Whitepaper
26 Aug 2007
Some SSL Statistics
26 Aug 2007
Entrust Secures Online Indian Music Retailer, Implements EV SSL Certificates
17 Aug 2007
Wildcard SSL Certificate Pros and Cons
16 Aug 2007
Firefox EV Plug-In Only Supports VeriSign Certificates
8 Aug 2007
Move your Java Keytool SSL Certificate to OpenSSL
7 Aug 2007
Secure your Email with SSL
3 Aug 2007
Firefox EV Certificate Interface plans
2 Aug 2007
Ruby on Rails SSL configuration
2 Aug 2007
Linux Postfix SSL Installation
1 Aug 2007
A Short History of VeriSign
28 Jul 2007
Secure Outlook Web Access with (free) SSL
25 Jul 2007
An Introduction to SSL VPNs
23 Jul 2007
Implementing SSL on Windows a machine
20 Jul 2007
Microsoft Windows Root Certificate Security Issues
19 Jul 2007
Scare customers with expired SSL certificates
18 Jul 2007
GlobalSign Rebrands and Relaunches
13 Jul 2007
Internet Passes 600,000 SSL Sites
12 Jul 2007
Is SSL causing security problems?
11 Jul 2007
Debugging SSL communications
11 Jul 2007
Many leading sites deploying EV SSL
9 Jul 2007
An Introduction to Exchange 2007 and Certificates
8 Jul 2007
Version 1.0 of EV SSL Guidelines Approved
6 Jul 2007
7 Deadly Sins of Website Vulnerability Disclosure
2 Jul 2007
Is Windows CardSpace flawed?
30 Jun 2007
How to choose a certificate authority
29 Jun 2007
Should you use dynamic sub-domains on your site?
28 Jun 2007
EV Success: DebtHelp measures ROI of over 16,000%
28 Jun 2007
Hacking Gmail Notifier to Use SSL
26 Jun 2007
Securing Communications with SSL/TLS: A High-Level Overview
25 Jun 2007
Will EV SSL Certificates Work?
24 Jun 2007
Google's Safe Browsing API Released
24 Jun 2007
Secure your Wordpress Admin and Login Pages
24 Jun 2007
An SSL Connection without https with aSSL
23 Jun 2007
An SSL Haiku
22 Jun 2007
EV in Opera Unveiled
17 Jun 2007
Online shoppers will pay more for privacy
17 Jun 2007
The Importance of SSL Certificates for Alternative Auction Sites
17 Jun 2007
Eligibility expands for EV Certificates
17 Jun 2007
SSL/TLS Strong Encryption: FAQ - Apache HTTP Server
16 Jun 2007
How to Create a Self Signed Certificate
15 Jun 2007
HowtoForge - Secure Websites Using SSL and Certificates
13 Jun 2007
AmbironTrustWave Acquires SecureTrust Corporation
5 Jun 2007
What PayPal has to say about EV SSL
4 Jun 2007
Is Phishing getting worse?
31 May 2007
10 Anti-Phishing Firefox Extensions
Top Resources
SSL Wizard
Cheap SSL Certificates
Code Signing Certificates
Wildcard Certificates
SSL Tools
#1 Rated Certificate Provider
Get Pricing
Subscribe
RSS Feed
