Entrust Blog

62 Total Results

Java Secures Supply Chains through Code Signing
This post was originally published by Bruce Morton & Erik Costlow on the CA Security Council blog. We have recently discussed the benefits of code signing in two posts: Securing Software Distribution with Digital Signatures and Improving Code Signing. These posts covered the role of code signatures...
Tags icon TLS/SSL Certificates  | 
Bruce Morton
 | 
Dec 2013

Updated SSL/TLS Deployment Best Practices
First, I would like to than Ivan Ristic for his development of the SSL/TLS deployment Best Practices document. This is a simple overview of what a Web server administrator should consider in an SSL deployment. I am also looking forward to Ristic's book, "Bulletproof SSL/TLS and PKI," which hopefull...
Tags icon TLS/SSL Certificates  | 
Bruce Morton
 | 
Sep 2013

Why Do I Need UC Multi-Domain SSL Certificates?
This certificate is sometimes called unified communications certificate (UCC), multi-domain certificate or multi-SAN certificate. In this posting, we will call them UCC or UC certificate. The unique feature of the UC certificate is that it takes full advantage of the subject alternative name (SAN) ...
Tags icon TLS/SSL Certificates  | 
Bruce Morton
 | 
Aug 2013

Moving to 2048-bit Keys
In the last few months, I have been reading blog posts (e.g., Google and Evernote) about certificate subscribers changing their keys from 1024-bit to 2048-bit RSA. I suppose congratulations may be in order. But, on the other hand, what’s been the delay? I’ve post a couple of blogs about key size po...
Tags icon TLS/SSL Certificates  | 
Bruce Morton
 | 
Jul 2013

Firefox to Block Mixed Content
Congratulations, Mozilla, on your plan to release Firefox 23 that will block mixed content. Website owners who have mixed-content pages will surely be impacted and should make changes. Along with Firefox, Internet Explorer, Chrome and Opera already block mixed content. This means the users of the...
Tags icon General  | 
Bruce Morton
 | 
May 2013

SSL Certificate Status Checking
As part of its effort to promote SSL certificate best practices, the CA Security Council (CASC) has offered a couple of blogs on the importance of revocation checking, categorized in Part 1 and Part 2. Here are my summaries of SSL certificate status checking. What is the purpose of a CA-issued SSL ...
Tags icon TLS/SSL Certificates  | 
Bruce Morton
 | 
Mar 2013

Filter By

Topic

Author(s)