Skip to main content
  • EDC Logo
  • Digital Security
  • Issuance Systems
  • Solutions
  • Partners
  • Resources
  • Company
  • Select Language EN
  • Search
  • Login
  • Digital Security
    • Certificate Solutions
      • Digital Certificates
        • TLS/SSL Certificates
          • Standard OV TLS/SSL
          • Advantage OV TLS/SSL
          • Multi-Domain OV TLS/SSL
          • Multi-Domain EV TLS/SSL
          • Wildcard OV TLS/SSL
          • Private TLS/SSL
        • Qualified Certificates
          • Qualified Electronic Seal Certificates
          • QWAC eIDAS Certificates
          • QWAC PSD2 Certificates
        • Sales and Services
          • Platinum Services
          • Entrust Certificate Services
          • Subscription Plan
          • Buy Certificates
          • Renew Certificates
          • Knowledge Base and Support
        • Verified Mark Certificates (VMC) for BIMI
      • Digital Signing
        • Digital Signing as a Service
          • Signing Automation Service
          • Remote Signing Service
        • Signing Certificates
          • Document Signing Certificates
          • Secure Email Certificates
          • OV Code Signing Certificates
        • Signing Servers
          • Remote Signing Server
          • Signing Automation Server
          • Entrust Timestamping Authority
          • Entrust Signature Activation Module
      • Public Key Infrastructure (PKI)
        • Products
          • Certificate Hub
          • Security Manager
          • Entelligence Security Provider
          • Epassport
          • Validation Authority
          • Key Recovery Server
        • Managed Services
          • Entrust Managed PKI
          • PKI as a Service
          • Cryptography as a Service
          • Managed Microsoft PKI
          • Managed Offline Root Certificate Authority
      • Cryptographic Center of Excellence
      • Internet of Things (IoT) Security
    • Identity and Access Management
      • Products
        • Products
          • Identity as a Service

            Formerly IntelliTrust

          • Identity Enterprise

            Formerly IdentityGuard

          • Identity Essentials

            Formerly SMS Passcode

      • Solutions
        • Workforce IAM
          • Physical / Logical Access
          • PIV-compliant Government Mobility
          • Privileged Users
          • Safeguarding Your VPN
          • Security and Access for Contractors
          • Workstation Login
          • Zero Trust
        • For Consumers and Citizens
          • Consumer Banking
          • Consumer Identity and Access Management (CIAM)
          • Customer Portals
          • Digital Citizen
          • Digital Onboarding
        • Use Cases
          • Improve User Experience
          • Mitigate Data Breaches
          • Streamline IT
          • Support Diverse User Groups
          • Transaction Verification
          • Managed Service Provider (MSP)
          • Managed Service Option
      • Portfolio Capabilities
        • Establish Trust
          • Credential Issuance
          • Device Reputation
          • ID Proofing
          • Identity Orchestration
          • Password Reset
          • Role Based Access Control
          • Secure Device Provisioning
        • Verify/Transact
          • Authenticators
          • Mobile Authentication
          • Multi-Factor Authentication MFA
          • Passwordless Login
          • Adaptive Authentication
          • Single Sign-On
          • APIs / SDKs
        • Maintain Trust
          • API Security
          • Fraud Prevention
      • Testimonials
    • Data Protection
      • Hardware Security Modules
        • nShield HSMs
          • nShield Connect
          • nShield Edge
          • nShield Solo
          • nShield as a Service
          • nShield HSMi
        • nShield Software
          • CodeSafe
          • Software Option Packs
          • eIDAS Remote QSCD
        • Management and Monitoring
          • nShield Monitor
          • nShield Remote Administration
      • Cloud Security, Encryption and Key Management (formerly HyTrust)
        • Cloud Security Posture Management
          • CloudControl for AWS
          • CloudControl for Containers
          • CloudControl for vSphere and NSX
          • CloudControl Foundation Edition
        • Multi-Cloud Encryption
          • DataControl for Azure
          • DataControl for AWS
          • DataControl for IBM Cloud
        • Key Management
          • KeyControl
      • Use Cases
        • Credentialing and PKI Applications
          • Blockchain Security
          • OV Code Signing
          • Credential Management
          • Digital Signatures
          • DNSSEC
          • IoT Device Credentialing
          • PKI and Digital Certificates
          • Strong Authentication
          • Time Stamping
        • Data Security and Encryption
          • Application Level Encryption
          • Big Data Encryption
          • BoundaryControl
          • Database Encryption
          • TLS-SSL Encryption
          • Tokenization
        • Cloud Security
          • Bring Your Own Key - Hold Your Own Key - Double Key Encryption
          • Containerized Application Deployments
          • Subscription-Based HSMs
          • Web Services-Based Deployments
        • Payments
      • Compliance
        • Americas
          • CCPA
          • FDA DEA CSOS
          • FDA DEA EPCS
          • GLBA
          • HIPAA
          • Mexico Data Protection Law
          • NIST 800-53 Fedramp
        • APAC
          • Australia Privacy Amendment
          • Monetary Authority of Singapore Guidance
          • Philipines Data Privacy Act
          • South Korea’s PIPA
          • Thailand's Personal Data Protection Act
          • UIDAIS Aadhaar Number Regulation Compliance
        • EMEA
          • EIDAS
          • PSD2
          • South Africas Protection Personal Information Act
        • Global
          • GDPR
          • ISO-277992016 Compliance
          • ISOIEC-270022013 Compliance
          • PCI-DSS
        • Certification
          • Common Criteria
          • FIPS 140-2
      • Industry
          • Connected Vehicle Security
          • Financial Services
          • Government
          • Healthcare
          • High-Tech Manufacturing
          • Internet of Things Security
          • Pharmacies
          • US Federal Government
      • Services
        • Custom Cryptographic Solutions
          • Code Signing
          • HSM Application Integration
        • Product Deployment Services
          • nShield Deployment Health Check
          • nShield Remote Administration Deployment
          • Rapid Deployment
        • PKI Professional Services
        • Training
          • nShield Certified Solution Developer Training
          • nShield Certified System Engineer Course
          • Public Key Infrastructure
        • Support
        • Packaged Services
          • Code Signing Gateway
          • Double Key Encryption Integration
          • Tokenization Solution
  • Issuance Systems
    • Central Issuance
      • Financial Cards
        • Financial Cards
          • Financial Cards Overview
          • Issuance Systems
          • Inline Delivery & Insertion
          • Standalone Delivery & Insertion
          • Software
          • Supplies
          • Services
      • Government Cards
        • Government Cards
          • Government Cards Overview
          • Issuance Systems
          • Inline Delivery & Insertion
          • Standalone Delivery & Insertion
          • Software
          • Supplies
          • Services
      • Passports
        • Passports
          • Issuance Systems
          • Passports Overview
          • Software
          • Supplies
          • Services
    • Instant Issuance
      • Financial Cards
        • Financial Cards
          • Financial Cards Overview
          • Issuance Systems
          • Software
          • Supplies
          • Services
      • ID Cards
        • ID Cards
          • ID Cards Overview
          • Issuance Systems
          • Software
          • Supplies
          • Services
    • Software
      • Entrust Digital Card Solution
      • Central Issuance Financial Card Software
      • Central Issuance Government ID Software
      • Central Issuance Passport Software
      • Instant Financial Issuance Software
      • Instant ID Issuance Software
  • Solutions
    • Industry Verticals
      • Financial
      • Government
      • Education
      • Enterprise
      • Healthcare
      • Retail
    • Regulatory Compliance
      • PSD2
      • HIPAA
      • GDPR
      • CMMC
      • eIDAS
    • Use Cases
      • Vaccine & Testing Credentials
      • Trusted Digital Identities
      • Mobile Device Management
      • Key Management
      • Cloud-Based Cryptography
      • Seamless Travel
      • ePassport
      • Food Labeling
      • Casino
  • Partners
    • Partners and Programs
      • Find an Entrust Partner
      • Become a Partner
      • PartnerPlus Channel Program
      • Technology Alliance Program
      • nFinity HSM Channel Program
      • nFinity HSM Technology Program
      • IAM MSP Program
      • IIDI MSP Program
    • Partner Logins
      • Partner Central
      • SSL Partner Ordering Portal
      • Certificate Services Portal
      • TrustedCare
      • nFinity HSM Partner Portal
  • Resources
      • Central Card Issuance
      • Central Passport Issuance
      • Instant Financial Card Issuance
      • Instant ID Issuance
      • Issuance Software
      • Knowledge Base - Issuance Systems
      • Certificate Solutions
      • PKI and IoT
      • Identity and Access Management
      • Hardware Security Modules
      • Cloud Security, Encryption and Key Management (formerly HyTrust)
      • Knowledge Base - Digital Security
      • Library
      • Training
      • Legal and Compliance
      • Covid 19 Updates
  • Company
      • History
      • Leadership
      • Entrust Rebrand
      • Careers
      • Events
      • Webinars
      • News Articles
      • Press Releases
      • Blog
      • Contact Sales
      • Contact Support
      • Locations
  • Languages
      • English
      • 中文
      • Português
      • Français
      • Deutsch
      • Русский
      • 한국어
      • Español
      • Italiano
      • 日本語
  • Search
  • Login Portals
    • Customer
      • Entrust Certificate Services Portal
      • TrustedCare

        Product Downloads and Technical Support

      • Entrust | Learning
    • Ecommerce
      • Instant Financial Card Issuance Supplies
    • Partners
      • Partner Central

        Identity and Access Management, PKI, Tech Alliance and Identity Essentials

      • SSL Partner Ordering Portal
      • TrustedCare

        Product Downloads, Technical Support, Marketing Development Funds

      • Entrust | Learning
Menu
  • Digital Security
  • Issuance Systems
  • Solutions
  • Partners
  • Resources
  • Company
  • Blog
  • Featured Post
  • Recent
  • Topics
  • Thought Leaders
  • SEARCH BLOG

SSL Review: November 2017

Bruce Morton December 15, 2017

Entrust Datacard’s monthly SSL review covers SSL/TLS discussions — recaps news, trends and opinions from the industry.

Entrust Datacard …

How I Can Protect My Brand TLD?


CA Security Council …

How Does the ROCA Attack Work?


Bulletproof TLS Newsletter …

Bulletproof TLS Newsletter #34 – Comodo gets controversial new owner


Other News & Notes:

El Reg assesses crypto of UK banks: Who gets to wear the dunce cap?

Kieren McCarthy discusses the RFC for Application Layer TLS

What is an SSL Flood?

Mozilla’s November 2017 CA Communication

What is Server Name Indication (SNI)?

StartCom SSL Shutting Down as of January 1, 2018

We still need more proof that the DV SSL Visual Indicator is too strong?

Only 71% of Government Websites Pass the SSL Test

Tags:

  • SSL Review
  • SSL
  • TLS
  • ROCA
  • SNI
  • Certificate Services
Bruce Morton / VIEW ALL Bruce'S POSTS Director for Certificate Services

Bruce Morton is a pioneering figure in the PKI and digital certificate industry. He currently serves as Director for Certificate Services at Entrust, where he has been employed since 1997. His day-to-day responsibilities include managing standards implementations, overseeing Entrust’s policy authority, and monitoring Entrust Certificate Service for industry compliance.

Contact
  • Contact Sales
  • Contact Support
  • Find a Location
Company
  • About
  • Careers
  • Events
  • Webinars
Newsroom
  • Blog
  • Press Releases
  • News
Product Resources
  • Entrust Store
  • Resources
  • Library
  • Training
  • Legal and Compliance
  • Covid 19 Updates
Social
  • Twitter
  • Facebook
  • Instagram
  • LinkedIn
  • YouTube

  • English
  • 中文
  • Português
  • Français
  • Deutsch
  • Русский
  • 한국어
  • Español
  • Italiano
  • 日本語
  • Legal
  • Privacy Statement
  • Terms of Service
  • Company Policies
©2022 Entrust Corporation. All rights reserved.
×

👋 Hello, if you have any
questions, I'm ready to chat.

Chat Now
Close Pre-Chat Window
Chat with Entrust

What would you like help with today?

CMMC HSM HSM Digital Certificates Digital Signing Certificates Identity and Access Mgmt PKI/IoT Instant ID Card Issuance Instant Financial Card Issuance Central Government Card Issuance Central Financial Card Issuance Central Passport Issuance

It looks like our HSM agents are not available right now.

Would you like us to contact you?

Yes No

Great! We look forward to talking with you.

Please complete this simple form and we'll have someone get in touch with you shortly.

Request an Agent Call

No problem.

If you’d like to explore HSMs on our website, here are some links to help:

View HSM Products