#interetsecurity

Believe it or not, but according to Google’s security team, NIC (India’s National Informatics Center) have been issuing unprincipled and dodgy SSL certificates. It has come to notice their that NIC has issued several unauthorized SSL certificates to various Google domains. These unauthorized certificates can be used to bluff and pretend as a legit Google website on different servers and can put user’s information at risk. With the use of such dodgy SSL certificate, it is easy to spy on or fiddle with user’s encrypted communication.

Fake Certificate Security Issues

SSL/TLS (Security Socket Layer/ Transport Layer Security) encryption systems are badly hit by this dodgy SSL certificate, which was used to secure https:// connection. Various issues that have been raised so far are listed below:

• A warning was issued by Microsoft over ‘improper issued’ SSL certificate which could have resulted in a phishing attack.

• Apple also got alerted about the critical SSL flaw in Mac OS and iOS

• Google has warned CNNIC, an intermediate certificate authority, about the issuing of unauthorized digital certificates.

Certificate Transparency

Google accepts that it is a serious breach of the CA system and such incidents indicate that Google’s Certificate Transparency efforts are critical for protecting the security of certificates in the future. Certificate transparency will help in:

Eliminating security flaws as it will provide an open framework to monitor and audit SSL certificate in near real time.

Detect Fake SSLs.

Identifying CAs attempt to issue unauthorized SSL certificates

Pinning public key can specify authorized SSL certificates.

Issuing authorities as well as can reject fake dodge SSL certificates.

Google Logging System

Google engineers have come up with a logging system that brings together CAs (ones that are trusted) and CAs working hard to build its goodwill. They have managed to issue a list of these CA’s on a public platform and specified those that are no longer trusted by browsers. The main mission of this system is to:

• Protect its user from fake and illegally issued SSL certificates

SSL Certificate acts as a backbone of the Internet security system. It provides an encrypted link between a browser and a server, which helps in transferring or sharing data in encrypted form to keep the data integral and secure from falling in the wrong hands and from being misused. There are many types of SSL certificates available in the market, but it depends upon the requirement of the applicant, what level of SSL certificate would suit him the best. Higher the security required, higher the level of SSL certificate is needed.

Wildcard certificate: If you own a domain and multiple subdomains, and you want to secure them all, instead of buying a certificate for every single domain and subdomain, you can buy Wildcard certificate, which will secure an unlimited number of subdomains but to a specific level. Along with providing security to multiple domains and subdomains, it will also save your time and money, which you would have wasted in buying and installing multiple certificates for every single domain and subdomain.

Technically, we can say that a Wildcard Certificate is a public key certificate and it can be used with numerous subdomains of a domain. The primary use of this certificate is to secure website prefixed with https://. A single Wildcard certificate works for your convenience and saves a lot of time, but it also protects or secures the main domain as well as its subdomain at the same time.

Multi-Domain Wildcard SSL Certificate For Unlimited Subdomain Security