- Solutions
  - Strong Identities
    1. Digital Signature
      Use secure, verifiable signatures and seals for digital documents.
    2. Machine Identity
      Issue and manage strong machine identities to enable secure IoT and digital transformation.
    3. User Identity
      Elevate trust by protecting identities with a broad range of authenticators.
    4. Identity Verification
      Enable high assurance identities that empower citizens.
    5. ID Issuance
      Issue safe, secure physical and digital IDs in high volumes or instantly.
  - Secure Payments
    1. Financial Issuance
      Issue physical and digital financial identities and credentials instantly or at scale.
    2. Digital Card Solution
      Issue digital payment credentials directly to cardholders from your bank's mobile app.
  - Trusted Infrastructure
    1. Database Security
      Secure databases with encryption, key management, and strong policy and access control.
    2. Multi-cloud Security
      Secure encryption keys, containers, and data across multi-cloud. environments.
- Industry
- Compliance
  - 1. PSD2
    2. HIPAA
    3. GDPR
  - 1. CMMC
    2. eIDAS
- Cloud Security, Encryption, and Key Management
  - Cloud Security Posture Management
  - Multi-Cloud Encryption
  - Key Management
- Digital Certificates
  - TLS/SSL Certificates
  - Qualified Certificates
  - Sales and Services
  - Verified Mark Certificate (VMC) for BIMI
    Show your official logo on email communications. Download our white paper to learn all you need to know about VMCs and the BIMI standard.
    Learn More
- Digital Signing
  - Digital Signing as a Service
    1. Signing Automation Service
    2. Remote Signing Service
  - Signing Certificates
  - Signing Servers
- Hardware Security Modules (HSM)
  - nShield HSMs
    1. nShield Connect
      Networked appliances that deliver cryptographic key services to distributed applications.
    2. nShield Edge
      Personal, USB-connected desktop HSMs.
    3. nShield Solo
      PCI-Express card-based HSMs.
    4. nShield as a Service
      Subscription-based access to dedicated nShield HSMs.
    5. nShield HSMi
  - nShield Software
  - Management and Monitoring
    1. nShield Monitor
    2. nShield Remote Administration
  - Compliance
    1. FIPS 140-2
    2. GDPR
    3. PSD2
    4. NIST 800-53 Fedramp
    5. Common Criteria
    6. eIDAS
    7. HIPAA
    8. PCI-DSS
    9. Americas
    10. EMEA
    11. APAC
    12. Global
  - Use Cases
  - 1. View All Use Cases
- Identity and Access Management (IAM)
  - Products
    1. Identity as a Service
      Cloud-Based IAM
    2. Identity Enterprise
      On-prem IAM
    3. Identity Essentials
      On-prem MFA solution for Windows users
  - Testimonials
  - Portfolio Capabilities
  - Workforce Identities
  - For Consumers and Citizens
- Public Key Infrastructure (PKI)
  - Products
  - Managed Services
- Central Issuance
  - Financial Cards
  - Government Cards
- Instant Issuance
  - Financial Cards
  - ID Cards
- Passport issuance
  - Passports
  - Try Our Passport Credential Builder
    Learn More
- Partners
  - Become an Entrust Partner
    Our partner programs can help you differentiate your business from the competition, increase revenues, and drive customer loyalty. Consider joining one or more of our Entrust partner programs and strategically position your company and brand in front of as many potential customers as possible.
    Learn More
  - Partner Directory
    Search for partners based on location, offerings, channel or technology alliance partners.
    Search for a Partner
  - Programs
  - Partner Logins
- Support & Services
  - Contact Support
  - TrustedCare
    Product downloads, technical support, marketing development funds.
    Learn More
  - Digital Security Knowledge Base
    Guides, white papers, installation help, FAQs and certificate services tools.
    Learn More
  - Issuance Systems Knowledge Base
    Technotes, product bulletins, user guides, product registration, error codes and more.
    Learn More
  - PKI Professional Services
  - Cryptographic Center of Excellence
    Construct best practices and define strategies that work across your unique IT environment.
    Learn More
  - Custom Cryptographic Solutions
    1. Code Signing
    2. HSM Application Integration
  - Product Deployment Services
  - Packaged Services
  - Training
- Resources
  - Issuance Systems Knowledge Base
    Technotes, product bulletins, user guides, product registration, error codes and more.
    Learn More
  - Digital Security Knowledge Base
    Guides, white papers, installation help, FAQs and certificate services tools.
    Learn More
- About Entrust
  - Securing a World in Motion Since 1969
    We’ve established secure connections across the planet and even into outer space. We’ve enabled reliable debit and credit card purchases with our card printing and issuance technologies. Protected international travel with our border control solutions. Created secure experiences on the internet with our SSL technologies. And safeguarded networks and devices with our suite of authentication products.
    Explore Our History
  - 1. Leadership
    2. Blog
    3. Careers
    4. Events
    5. Webinars
    6. Podcasts
    7. News Articles
    8. Press Releases
  - Cybersecurity Institute
    Get critical insights and education on security concepts from our Trust Matters newsletter, explainer videos, and the Cybersecurity Institute Podcast.
    Learn More
- Shop
  - Entrust Certificate Services Portal
    Existing Entrust Certificate Services customers can login to issue and manage certificates or buy additional services.
    Learn More
  - Entrust Certificate Services Retail
    Shop for new single certificate purchases.
    Learn More
  - Entrust Certificate Services Partner Portal
    Existing partners can provision new customers and manage inventory.
    Learn More
  - Instant Financial Card Issuance Supplies
    1. Registered Customer Login
    2. Request Access
- Search Entrust
  - Search:

SSL Review: November 2018

Bruce Morton December 7, 2018

Entrust Datacard’s monthly SSL review covers SSL/TLS discussions — recaps news, trends and opinions from the industry.

Entrust Datacard…

Major Browsers Coordinated on Deprecating TLS 1.0 and 1.1

Half of phishing sites are using HTTPS…

TLS 1.3 illustrated….

The New Illustrated TLS Connection

Bulletproof TLS Newsletter …

Bulletproof TLS Newsletter #47 – Attacking cryptography with side channels<

Other News & Notes

Introducing Cert Spotter API 1.0 – The Easiest Way To List A Domain’s Certificates
Petition: Add the .gov TLD to the HSTS preload list
HTTP/3 is here… sort of
Apple Safari testing “Not Secure” warning for HTTP websites
Sennheiser’s HeadSetup software is vulnerable to MITM attacks
Abuse MITM possible regardless of HTTPS
Executing a Man-in-the-Middle Attack in just 15 Minutes

Tags:

Certificate Services

Bruce Morton / VIEW ALL Bruce'S POSTS Director for Certificate Services

Bruce Morton is a pioneering figure in the PKI and digital certificate industry. He currently serves as Director for Certificate Services at Entrust, where he has been employed since 1997. His day-to-day responsibilities include managing standards implementations, overseeing Entrust’s policy authority, and monitoring Entrust Certificate Service for industry compliance.