SSL News
SSL Host Headers in IIS 7
SSL Host Headers in IIS 7 allow you to use one SSL certificate for multiple IIS websites on the same IP address. Through the IIS Manager interface, IIS only allows you to bind one site on each IP address to port 443 using an SSL certificate.
Moxie Marlinspike's New SSL Attack is Nothing New
Moxie Marlinspike presented on a "new" way of attacking SSL at the Black Hat security conference on Wednesday. His tool, called SSLstrip, exploits the interface between http and https sessions using techniques that have existed for years. How does it work and what is the solution?
What is WebTrust for CAs (Certification Authorities)?
Who watches the watchers? Every Certification Authority undergoes a stringent audit called the AICPA/CICA WebTrust Program for Certification Authorities which ensures that they are following certain procedures and security policies.
GoDaddy Captures 47 Percent of SSL Market
Press release about the growth of Go Daddy in the SSL Certificate market.
DigiCert SSL Certificate Products Offer Multiplicity, Affordability and Compatibility
Press release about DigiCert's Unified Communications and Wildcard products and their Easy CSR Command Generators.
VeriSign Forgets to Renew an SSL Certificate
It seems that no one is immune to letting an SSL certificate expire. Not even VeriSign, the largest provider of SSL certificates.
SSL VPN Servers
Learn more about SSL VPN Servers and how they can give you a revolutionary way to securely access your files and applications anywhere in the world.
Check SSL Certificates for the Vulnerable MD5 Algorithm
The newly discovered vulnerability in using MD5 signatures for SSL certificates has many people wondering about the security of their web sites and the security of other sites they visit on the Internet. You can check the security of the SSL Certificate installed on your website using this tool.
MD5 Weakness Allows Fake SSL Certificates To Be Created
New research published today demonstrates how someone could use a weakness in the MD5 signatures allow people to make fake SSL certificates that look like they were signed by a real certificate authority. How big of a problem is it?
VeriSign Vs. Non-VeriSign SSL Certificates
How does VeriSign compare to other SSL providers? A Youtube commercial explains in comedic fashion.
