Friday, April 27, 2012
You thought you're safe in an https site? Think again
8:57 PM
teokirk
You thought you're safe in an https site? Think again
2012-04-27T20:57:00+03:00
teokirk
be safe online|how to be safe on the internet|htpps not safe|https|https domain|https safety|https site|internet protection|safe internet|secure site|security|ssl https|web certificate|
Comments
Research published by the Trustworthy Internet Movement, a nonprofit organization dealing with security on the Internet, reveals that 90 percent of the top 200 000 websites with https protection is vulnerable to attack SSL (Secure Sockets Layer). The data derived from a new project called SSL Pulse using an automated scanning technology to analyze the security of https sites located on the first list of the company analyzes Alexa.
The project uses an algorithm to rank websites for security they provide and the protocols they use. Most sites were able to score a good score but only ten percent were truly safe. The rest were found to be vulnerable to an attack known as BEAST (Browser Exploit Against SSL / TLS) is used to decrypt tokens and cookies from certification requests HTTPS.
The vulnerability corrected in version 1.1 of the Protocol TLS servers but many still continue to support older protocols such as SSL 3.0, for compatibility with previous generations. "For the average website, which has significant potential value, the risk is very small. But for pages that have large numbers of users and important risk is too great. "
You thought you're safe in an https site? Think again
2012-04-27T20:57:00+03:00
teokirk
be safe online|how to be safe on the internet|htpps not safe|https|https domain|https safety|https site|internet protection|safe internet|secure site|security|ssl https|web certificate|