Operationalizing Secure by Design: a CISO’s guide to closing the gap between policy and reality
We’ve been listening to dozens of CISOs. In roundtables, peer forums, customer and prospect calls, on the record, off the record, at event floors and …
IT Security FAQ 8: SSL? Https:// – how do you connect it? What info should be encrypted?
Detectify
Secure Sockets Layer (SSL) is a cryptographic protocol designed to provide communications security over a computer network.
SSL makes the communication safe between two points, and ensures that ”no one” is sitting in-between, eavesdropping on the conversation. You’ll usually see if a site is encrypted if the url starts with https:// instead of http://.
Comment from our expert:
”An SSL encrypts communication on the web to make it harder for hackers to tap into a conversation. To be honest, all sites online should use SSL today. The only reason that all aren’t is because it is sometimes difficult to implement. You can activate a SSL on your own website by talking your site host, or with your system admin, because it needs to be activated on the server. The organization Let’s Encrypt are now looking at revolutionizing the whole SSL field, making it easier to setup, configure and renew SSL certificates. They are also offering free SSL certificates for all,”
says Johan Edholm at Detectify.
Visit Let’s Encrypt to learn more.
Want more IT security information? Don’t miss out on the other parts of our IT Sec FAQ series!
Check out more content
Why traditional DAST Tools fail modern AppSec teams (and how to fix it)
For years, development and security practitioners have treated dynamic application security testing as a critical final safety check before code goes live. However, the external …
