Feds aim to bolster data encryption practices for .gov websites

The Trump administration is urging domain operators to include an extra layer of security on federal websites in an attempt to reduce the risk that hackers will spy on site visitors. The goal, which officials said could take “a few years” to achieve, is to get all websites with the .gov internet domain to use a standard that always encrypts a user’s connection to that site. Using that encryption by default is a way for agencies to boost security for a swath of public data being routed through internet domains they control. The security benefits of doing that “are meaningful and necessary to continue meeting the public’s expectation of safety on .gov services,” the General Services Administration, which oversees top-level domains for the U.S. government, said in a blog post published Sunday. The initiative builds on use of the HTTPS, a security protocol that internet users have come to expect from websites. HTTPS is meant to ensure that websites are legitimate, and protects […]

The post Feds aim to bolster data encryption practices for .gov websites appeared first on CyberScoop.

Continue reading Feds aim to bolster data encryption practices for .gov websites

Best Practices for Securing a Remote Workforce

Here are eight tips to help security organizations in securing their remote workforce The novel coronavirus COVID-19 is causing global health and economic crises and profoundly impacting the way we live and work. Its effects will no doubt be long-last… Continue reading Best Practices for Securing a Remote Workforce

The Critical Role of SSL Inspection to Avoid Secure Malware Delivery

If you think the little green lock of https equals security, think again. The bad news is that the bad guys use encryption too. Many people mistakenly assume that as long as an SSL certificate is present, they’re safe from attack, but that c… Continue reading The Critical Role of SSL Inspection to Avoid Secure Malware Delivery