SSL

Monkey in the middle

Mon, 11 Aug 2008 09:59:32 -0400

This is why strong suth or OTP's are required along with strong end-point-control to help identify the threat on the device accessing the network and take some type of action.

Wow How hard is the Pad Lock

Thu, 22 May 2008 09:42:49 -0400

Perfectly on the target. SSL does not solve the security, it only create the "illusion". Zeeshan Ali Shah www.infoshield.info

VeriSign Demonstrates Corporate Citizenship

Matthew Nickasch — Wed, 21 May 2008 13:23:24 -0400

I recently discussed a vulnerability that was discovered within Debian's implementation of OpenSSL. This vulnerability poses a significant risk to users who generated unknowingly "weak" keys, and could potentially affect thousands and thousands of systems. In a recent bold press release, VeriSign announced a program allowing users to reissue SSL certificates free of charge, for 30 days. It is extremely important to note that the vulnerability was not related in any way to VeriSign's technology, however, citing corporate citizenship as the cause for the offer.

Read more

Department of Energy illuminates $21 million on advanced lighting research

Layer 8 — Wed, 13 Feb 2008 10:55:06 -0500

The US Department of Energy today said it would dole out almost $21 million for a total of 13 projects aimed at advancing solid-state lighting (SSL) research and product development.

Read more

Choosing the Right Remote Access VPN: 9 Important Questions

Mark_Lewis — Thu, 27 Dec 2007 16:10:29 -0500

Last time I looked at some important questions to ask when selecting a site-to-site VPN protocol or technology. This time I will discuss some the important questions to ask when choosing a remote access VPN.

Read more

RE: Open source Hyperic offers an alternative for VM management

Tue, 18 Dec 2007 14:22:50 -0500

Your statement about the HQ server / agent communication not supporting SSL is false. All communication to the agent from HQ is done over SSL, and agents are optionally given the ability to communicate over SSL with the server. This option was made available, since setting up an SSL connection can be CPU intensive, and not all users care that their incoming metric data is visible.

RE: Desktop search engines threaten SSL VPN security

Sat, 17 Nov 2007 11:24:17 -0500

An an individual with a good backup I have no security concerns. Who cares if someone reads my old email or looks at the 5000+ family album pictures. Not me. I don't put sensitive data on any of my computers. Companies should restrict some of their data to the one computer in the back back room. And leave the rest open for search.

RE: IPSec vs. SSL VPNs

Tue, 30 Oct 2007 11:40:12 -0400

"IPSec is better established in this arena and many SSL vendors don't even offer site-to-site connections." You can make a site-to-site and remote-to-site connection using openvpn without no problem.

RE: Juniper shrinking SSL traffic for the WAN

loftenter — Tue, 23 Oct 2007 23:22:01 -0400

The method they are using sounds a lot like a clear violation of someones privacy. tearing down an SSL connection that you think it terminating on a webpage? Doesn't sound good. Justin Lofton Systems Engineer justinl@tredent.com Tredent Data Systems, Inc. WAN Acceleration Information

EV SSL (Extended Validation SSL)

Inbox — Mon, 08 Oct 2007 15:29:05 -0400

Web-based businesses face a crisis in consumer confidence because of phishing scams. But because of a new kind of SSL certificate, Web sites will be able to definitively demonstrate their identity, and customers will be able to confirm the identity of trusted sites.

Extended Validation SSL (EV SSL) represents an attempt by browser and SSL vendors to fight phishing.

Developed by the CA/Browser Forum, EV SSL combines a new category of SSL certificates with a Web-browser interface that lets end users easily see whether a site has a valid certificate.

The EV SSL standard goes into great detail on three main authentication legs: organization, domain and requestor.

Read more

SSL (Secure Sockets Layer) VPNs

Inbox — Mon, 08 Oct 2007 15:23:07 -0400

Originally developed by Netscape as a way of ensuring the security of e-commerce transactions, SSL has become a low-cost alternative to IPSec-based virtual private networks.

Browser-based SSL alternatives require little or no software on remote PCs, and in most cases any PC with a browser can be used to make the secure connection, as long as the user can authenticate to a central server. And SSL firewall ports that the traffic uses are generally left open, so firewall reconfiguring is usually unnecessary. The idea is that SSL's simplicity translates into an easier installation and long-term cost savings because of simpler ongoing support. This contrasts with IPSec-based VPNs, which require a dedicated IPSec client on each remote machine.

Read more

Posture checking, NAC and SSL VPNs

Tue, 26 Jun 2007 19:53:05 -0400

Read more

Juniper still top seller of SSL VPN gear

Thu, 15 Feb 2007 15:00:37 -0500

Read more

A new SSL certificate is on the way

Fri, 05 Jan 2007 08:20:55 -0500

Read more

SSL VPN tests

Inbox — Tue, 20 Dec 2005 14:48:06 -0500

Reaction to our tests of 11 SSL VPN offerings.