Researcher Warns Most Sites Get SSL Wrong

Think just because your website uses SSL that it’s safe? Think again. According to a security research from Qualys, the chances are you’re doing it wrong.

Ivan Ristic has been digging into the SSL space for some time now. Just last month he found that nearly 97 percent of websites using SSL don’t match the name of the certificate with the name of the domain. Now, he’s found that a startling percentage don’t have their certificates correctly implemented. eSecurity Planet has the details.

LAS VEGAS — Secure Sockets Layer is a standard mechanism websites use to help secure data and transactions, but according to Qualys security researcher Ivan Ristic, most SSL sites are actually misconfigured.

Ristic delivered his study here at the Black Hat security conference as an update to the preliminary data he published last month.

Read the full story at eSecurity Planet:


SSL Study Shows Most Sites Incorrectly Configured