Passwords Evolved: Authentication Guidance for the Modern Era

Sponsored by: Thanks to Raygun! See every problem in your software and how to fix it. Reproduce issues with greater speed and accuracy. Try it free today!

In the beginning, things were simple: you had two strings (a username and a password) and if someone knew both of them, they could log in. Easy.

But the ecosystem in which they were used was simple too, for example in MIT’s Time-Sharing Computer, considered to be the first computer

Continue reading Passwords Evolved: Authentication Guidance for the Modern Era→

Weekly update 44

Sponsored by: Thanks to Raygun! See every problem in your software and how to fix it. Reproduce issues with greater speed and accuracy. Try it free today!

This was one of those weeks where time disappeared on totally unplanned things, namely due to the debate that raged on over days about certs (get popcorn then read upwards and downwards from there). I stayed well and truly clear of that once it got heated, but I then spent

Continue reading Weekly update 44→

Weekly update 44

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

This was one of those weeks where time disappeared on totally unplanned things, namely due to the debate that raged on over days about certs (get popcorn then read upwards and downwards from there). I stayed well and truly clear of that once it got heated, but I then spent

Continue reading Weekly update 44→

On The (Perceived) Value of EV Certs, Commercial CAs, Phishing and Let’s Encrypt

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

Last week I wrote about how Life Is About to Get a Whole Lot Harder for Websites Without HTTPS. Somewhere in the comments there, the discussion went off on a tangent about commercial CAs, the threat Let’s Encrypt poses to them and subsequently, the value (or lack thereof) posed by

Continue reading On The (Perceived) Value of EV Certs, Commercial CAs, Phishing and Let’s Encrypt→

On The (Perceived) Value of EV Certs, Commercial CAs, Phishing and Let’s Encrypt

Sponsored by: Thanks to Raygun! See every problem in your software and how to fix it. Reproduce issues with greater speed and accuracy. Try it free today!

Last week I wrote about how Life Is About to Get a Whole Lot Harder for Websites Without HTTPS. Somewhere in the comments there, the discussion went off on a tangent about commercial CAs, the threat Let’s Encrypt poses to them and subsequently, the value (or lack thereof) posed by

Continue reading On The (Perceived) Value of EV Certs, Commercial CAs, Phishing and Let’s Encrypt→

Weekly update 43

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

I’m home! After that crazy travel schedule (6 weeks and 1 day in all, thank you very much) I’m back in my own bed with some peace and quiet and… jet lag. It’s always worse coming home from Europe, a combination of flying east (I travel over two short nights)

Continue reading Weekly update 43→

Weekly update 43

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

I’m home! After that crazy travel schedule (6 weeks and 1 day in all, thank you very much) I’m back in my own bed with some peace and quiet and… jet lag. It’s always worse coming home from Europe, a combination of flying east (I travel over two short nights)

Continue reading Weekly update 43→

Life Is About to Get a Whole Lot Harder for Websites Without HTTPS

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

In case you haven’t noticed, we’re on a rapid march towards a “secure by default” web when it comes to protecting traffic. For example, back in Feb this year, 20% of the Alexa Top 1 Million sites were forcing the secure scheme:

HTTPS at 20%

These figures are from Scott Helme’s

Continue reading Life Is About to Get a Whole Lot Harder for Websites Without HTTPS→

Life Is About to Get a Whole Lot Harder for Websites Without HTTPS

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

In case you haven’t noticed, we’re on a rapid march towards a “secure by default” web when it comes to protecting traffic. For example, back in Feb this year, 20% of the Alexa Top 1 Million sites were forcing the secure scheme:

HTTPS at 20%

These figures are from Scott Helme’s biannual report

Continue reading Life Is About to Get a Whole Lot Harder for Websites Without HTTPS→

Weekly update 42 (Nieuwegein edition)

Sponsored by: Matchlight by Terbium Labs: Know when your exact data appears on the dark web. Contact us for a demo today.

Well this trip is certainly ending with a bang: 3 blog posts this week (not including this one) plus two massive user group talks in the Netherlands and two workshops of two days each. But that’s it – I’m done! It’s Friday morning here in Nieuwegein at the time of

Continue reading Weekly update 42 (Nieuwegein edition)→