Skip to main content
  • Support
  • Blog
  • Careers
  • Cybersecurity Institute
  • EDC Logo
  • Industries
  • Solutions
  • Products
  • Resources
  • Partners
  • Buy
  • About
  • Search
  • Contact Sales
    • Contact an Expert
    • Get Support
    • Industries
        1. Financial
        2. Government
        3. Education
        1. Enterprise
        2. Healthcare
        3. Retail
    • Solutions
      • Our Expertise
        1. Zero Trust
        2. Secure Digital Customer Interactions
        3. Secure Digital Citizen Interactions
      • Strong Identities
        1. Identity Verification
        2. ID Issuance
        3. User Identity
        4. Machine Identity
        5. Digital Signature
      • Secure Payments
        1. Financial Issuance
        2. Digital Card Solution
        3. Secure Transactions
      • Protected Data
        1. Post-Quantum Cryptography
        2. Database Security
        3. Multi-cloud Security
    • Featured Products
      • As a Service Products
        1. Identity Verification as a Service
        2. Identity as a Service (IDaaS)
        3. Digital Signing as a Service
        4. Instant ID as a Service
        1. Digital Card Solution
        2. PKI as a Service
        3. nShield as a Service
        4. Seamless Travel as a Service
        1. Instant Financial Issuance
        2. Central Financial Issuance
        3. Instant ID Issuance
        4. Central ID Issuance
        5. nShield HSMs
        1. Cloud Security, Encryption and Key Management
        2. Digital Certificates
        3. Identity and Access Management (IAM)
        4. Machine Identity Management
        5. Post-Quantum
    • Enterprise ID & Issuance
      • Instant ID as a Service
        Learn More
      • Instant Issuance
        1. System Software
        2. Supplies
        3. Services
    • Financial ID & Issuance
      • Digital Card Solution
        Learn More
      • Digital Banking
        1. Digital Account Opening
        2. Digital Card Solution
      • Instant Issuance
        1. System Software
        2. Supplies
        3. Services
      • Central Issuance
        1. Card Issuance Systems
        2. Inline Card Delivery Systems
        3. Inline Envelope Insertion Systems
        4. Standalone Card Affixing/Envelope Insertion Systems
        5. Standalone Envelope Insertion Systems
        6. System Software
        7. Supplies
        8. Services
    • Government ID & Issuance
      • Digital Citizen
        1. Seamless Travel as a Service
        2. ePassport as a Service
      • Instant Issuance
        1. Other citizen IDs and licenses.
        2. System Software
        3. Supplies
        4. Services
      • Central Issuance
        1. Passports, national IDs and driver licenses.
        2. Passport Issuance Systems
        3. National ID and Driver License Systems
        4. Inline Delivery & Insertion
        5. Standalone Delivery & Insertion
        6. System Software
        7. Supplies
        8. Services
      • Identity Verification as a Service
        Our IDVaaS solution allows remote verification of an individual’s claimed identity for immigration, border management, or digital services delivery.
        Learn More
    • Cloud Security Posture Management
        1. CloudControl Enterprise for AWS
        2. CloudControl Enterprise for Containers
        3. CloudControl Enterprise for Swift
        4. CloudControl Enterprise for vSphere and NSX
        5. CloudControl Foundation for vSphere
      • CloudControl 30-Day Free Trial
        Entrust CloudControl offers comprehensive security and automated compliance across virtualization, public cloud, and container platforms while increasing visibility and decreasing risks that can lead to unintended downtime or security exposure.
        Start Free Trial
    • Key Management and Encryption
        1. Entrust KeyControl
        2. KeyControl BYOK
        3. KeyControl for Database Encryption
        4. KeyControl for Backup and Recovery
      • KeyControl for VM Encryption
        1. KeyControl VM Encryption for Azure
        2. KeyControl VM Encryption for AWS
        3. KeyControl VM Encryption for IBM Cloud
      • KeyControl 30-Day Free Trial
        VMware vSphere and vSAN encryption require an external key manager, and KeyControl is VMware Ready certified and recommended. KeyControl enables enterprises to easily manage all their encryption keys at scale, including how often keys are rotated, and how they are shared securely.
        Start Free Trial
    • Hardware Security Modules (HSM)
        1. nShield as a Service
      • nShield HSMs
        1. nShield 5c
        2. nShield Connect
        3. nShield 5s
        4. nShield Solo
        5. nShield Edge
        1. Management and Monitoring
        2. CodeSafe
        3. Software Option Packs
        4. Compliance and Certification
      • Why you need an HSM
        Learn about all the details related to what hardware security modules offer you in security and cost savings...
        Learn More
    • Digital Certificates
        1. Buy Certificates
        2. Renew Certificates
      • TLS/SSL Certificates
        1. Multi-Domain EV
        2. Standard Plus OV
        3. Wildcard OV
        4. Private
      • Qualified Certificates
        1. QWAC eIDAS Certificates
        2. QWAC PSD2 Certificates
      • Sales and Services
        1. Platinum Services
        2. Entrust Certificate Services
        3. Subscription Plans
        4. Knowledge Base and Support
    • Identity and Access Management (IAM)
      • Products
        1. Identity as a Service
          Cloud-Based IAM
        2. Identity Enterprise
          On-prem IAM
        3. Identity Essentials
          On-prem MFA solution for Windows users
        4. APIs and SDKs
        1. Integrations
        2. Testimonials
        3. Workforce
        4. Consumer and Citizen
      • Get Entrust Identity as a Service Free for 60 Days
        Explore the Identity as a Service platform that gives you access to best-in-class MFA, SSO, adaptive risk-based authentication, and a multitude of advanced features that not only keep users secure, but also contribute to an optimal experience.
        Start Free Trial
    • Electronic and Digital Signing
      • Digital Signing as a Service
        1. Signing Automation Service
        2. Remote Signing Service
        3. Partners and Integrations
        4. Electronic Signing from Evidos, an Entrust Company
      • Digital Signing Certificates
        1. Document Signing
        2. PSD2 Qualified Certificates
        3. Secure Email (S/MIME)
        4. Code Signing
      • Digital Signing Infrastructure
        1. Remote Signing Engine
        2. Signing Automation Engine
        3. Timestamping Authority
        4. Signature Activation Module
      • yellow checkmark lock EU Qualified Trust Services
        In addition to our long-standing Adobe Approved Trust List (AATL) membership, we are a European Qualified Trust Service Provider for the issuance of eIDAS qualified certificates for qualified signatures and advanced seals, for PSD2 certificates and for QWACs
        Learn More
    • Public Key Infrastructure (PKI)
      • PKI Products
        1. Certificate Authority
        2. Certificate Agent
        3. ePassport
        4. Validation Authority
        5. Key Recovery Server
      • Managed Services
        1. Entrust Managed PKI
        2. Managed Offline Root CA
        3. Managed Microsoft PKI
        4. nShield HSM as a Service
      • Cryptographic Center of Excellence
        1. PKI as a Service
        2. PKI Certificate Hub
        3. Cryptographic Center of Excellence
        4. IoT Security
        5. Machine Identity Management
      • Try Post-Quantum PKI as a Service Now
        Get PQ Ready. PKIaaS PQ provides customers with composite and pure quantum Certificate Authority hierarchies.
        Try Now
    • Resources
      • Issuance Systems Knowledge Base
        Learn More
      • Digital Security Knowledge Base
        Learn More
        1. Webinars
        2. Podcasts
        3. Instant Financial Card Issuance
        4. Instant ID Issuance
        5. Certificate Solutions
        6. Identity and Access Management
        7. Hardware Security Modules (HSM)
        1. Blog
        2. Documentation Library
        3. Training
        4. Legal and Compliance
        5. Covid 19 Updates
        6. Russia-Ukraine Conflict
      • Entrust Cybersecurity Institute Cybersecurity Institute
        Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
        Learn More
    • Partners
      • Partner with Entrust
        Join one or more of our partner programs and we’ll help you increase profitability, expand your brand, and target strategic customers.
        Learn More
      • Partner Directory
        Search for partners based on location, offerings, channel or technology.
        Search for a Partner
      • Programs
        1. Solution Provider
        2. Distributor
        3. Entrust Ready Technology Program
      • Partner Logins
        1. Partner Central
        2. Entrust Certificate Services Partner Portal
        3. Entrust Certificate Services Portal
        4. TrustedCare
    • Buy
      • Shop Certificate Services
        Shop for new single certificate purchases.
        Learn More
      • Certificate Services Customer Portal
        Existing Entrust Certificate Services customers can login to issue and manage certificates or buy additional services.
        Learn More
      • Certificate Services Partner Portal
        Existing partners can provision new customers and manage inventory.
        Learn More
      • Instant Financial Card Issuance Supplies
        1. Registered Customer Login
        2. Request Access
    • About Entrust
      • Securing a World in Motion Since 1969
        We’ve established secure connections across the planet and even into outer space. We’ve enabled reliable debit and credit card purchases with our card printing and issuance technologies. Protected international travel with our border control solutions. Created secure experiences on the internet with our SSL technologies. And safeguarded networks and devices with our suite of authentication products.
        Explore Our History
        1. Leadership
        2. Events
        3. News Articles
        4. Press Releases
        1. Contact Sales
        2. Contact Support
        3. Locations
      • Entrust Cybersecurity Institute Cybersecurity Institute
        Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
        Learn More
    • Search Entrust
Entrust Blog › Certificate Services

SSL Review: November 2014

Bruce Morton
Bruce Morton December 3, 2014
December 03, 2014
By Bruce Morton

Entrust’s monthly SSL review covers SSL discussions “” recaps news, trends and opinions from the industry.

Entrust and CA Security Council

Entrust Identity ON discussed:

  • Infographic: Switching to SHA-2 SSL

CA Security Council discussed:

    • The Cost of Creating Collisions Using SHA-1

  • ‘Tis the Season for Online Safety

Hot Topics & Opinions

POODLE —

  • PayPal plans to disable SSL 3.0 in December
  • Microsoft Azure — Protecting against the SSL 3.0 vulnerability
  • Google has launched Chrome 39 — Goodbye SSL 3.0, Hello SHA-1 warnings

TLS Stack Attacks —

  • Update Windows to avoid WinShock
  • Every major TLS stack: OpenSSL, GNUTLS, NSS, MS SChannel, and Apple SecureTransport has had a severe vulnerability this year (2014)

News & Notes

    • Google introduces nogotofail for testing devices and applications against known SSL/TLS vulnerabilities and misconfigurations
    • Internet Explorer may support Public-Key Pinning
    • Kim Zetter’s book Countdown to Zero Day discusses how Duqu targeted a CA
    • EFF reports ISPs Removing Their Customers’ Email Encryption
    • Naked Security bids farewell to HTTP
    • ENISA 2014 report on algorithms, key size and parameters

  • Economic Failures of HTTPS Encryption

Tags:

  • Duqu
  • heartbleed
  • POODLE
  • Public Key Pinning
  • SHA-2
  • SSL
  • SSL Review
  • WinShock
  • Certificate Services
Bruce Morton
Bruce Morton / VIEW ALL OF Bruce'S POSTS Director for Certificate Services

Bruce Morton is a pioneering figure in the PKI and digital certificate industry. He currently serves as Director for Certificate Services at Entrust, where he has been employed since 1997. His day-to-day responsibilities include managing standards implementations, overseeing Entrust’s policy authority, and monitoring Entrust Certificate Services for industry compliance.

Entrust Text and Entrust Hex Logo Entrust Text and Entrust Hex Logo
Contact
  • Contact Sales
  • Contact Support
  • Find a Location
Company
  • About
  • Careers
  • Events
  • Webinars
  • Impressum
Newsroom
  • Blog
  • News
  • Press Releases
  • Cybersecurity Institute
Product Resources
  • Entrust Store
  • Resources
  • Library
  • Training
  • Legal and Compliance
  • Covid 19 Updates
Social
  • Twitter
  • Facebook
  • Instagram
  • LinkedIn
  • YouTube

  • English
  • 中文
  • Português
  • Français
  • Deutsch
  • Русский
  • 한국어
  • Español
  • Italiano
  • 日本語
  • Legal
  • Privacy Statement
  • Internet Based Ads
  • Terms of Service
  • Terms of Use
  • Company Policies
  • Cookie Preferences
  • Do Not Sell
©2023 Entrust Corporation. All rights reserved.
×

👋 Hello, if you have any
questions, I'm ready to chat.

Chat Now
Close Pre-Chat Window
Chat with Entrust

What would you like help with today?

CMMC HSM HSM Digital Certificates Digital Signing Certificates Identity and Access Mgmt PKI/IoT Instant ID Card Issuance Instant Financial Card Issuance Central Government Card Issuance Central Financial Card Issuance Central Passport Issuance

It looks like our HSM agents are not available right now.

Would you like us to contact you?

Yes No

Great! We look forward to talking with you.

Please complete this simple form and we'll have someone get in touch with you shortly.

Request an Agent Call

No problem.

If you’d like to explore HSMs on our website, here are some links to help:

View HSM Products