Home / Tag Archives: ssl

Tag Archives: ssl

July, 2010

  • 26 July

    Server Security Tips

    1. Do not allow direct root/administrator login 2. Make sure passwords are secure and changed regularly (by force if necessary) 3. Use a network firewall, such as APF 4. Use an application firewall, such as ModSecurity 5. Chroot all non-root users to keep them out of system directories 6. Use …

June, 2010

  • 8 June

    Joomla Security Tips Part 3

    joomlaconfig

    In the two previous parts of the Joomla security series, we looked at various configuration settings both prior and after installation. Here are some important security steps to take during installation. 1. Move the configuration.php outside of the root document directory. For example, if you directory is /home/user/www/public_html, you can …

May, 2010

  • 14 May

    New Web Site Shopping List

    You have purchased your domain and a hosting account. Now what do you do? You are ready to get your website started, so here are a few things you might need along the way. 1.Content Management System – Whether you have a blog or a shop, a CMS is pretty …

  • 11 May

    Self-Signed SSL Certificates

    SSL allows you to serve encrypted web pages to website visitors over the HTTPS protocol. Certificates must be signed in order to not set off browser flags that will question your site’s authenticity. But OpenSSL also provides the option to create a self-signed certificate, and many web hosting control panels …

  • 6 May

    What You Should Know About SSL Certificates

    SSL certificates allow website owners to provide something like a badge of authenticity to their users. In theory a website with a valid certificate should be trustworthy and secure. By default, web browsers will recognize a number of certificate authorities, companies that sell annual certificates and verify them. Depending on …

April, 2010

  • 9 April

    Common extra dedicated server features

    An unmanaged dedicated server is almost like a bare-bones computer. While you get all of the essentials required to call it a server, there are many features that you will want to add. Some of them are free and/or open source, while some require purchase or even subscription services. It …

  • 1 April

    How do I enable SSL/TLS in Dovecot mail server?

    Dovecot is a popular POP3/IMAP server for Unix-like operating systems. It is available through most distributions, including RHEL, CentOS, and Fedora. To enable secure mail transactions, you will need to edit your /etc/dovecot.conf file as root. Uncomment the following lines: # Disable SSL/TLS support? ssl_disable = no # PEM encoded …

March, 2010

  • 5 March

    Severe OpenSSL security vulnerability announced

    Web server administrators should take notice of a “severe” vulnerability that computer scientists have discovered in OpenSSL, the free and open source encryption software package for Linux and Unix-like systems. The bug is in OpenSSL’s cryptographic library and vulnerability allows attackers to retrieve a server’s cryptographic key, leaving any secure …

  • 5 March

    Half of SSL websites may not be safe

    According to Comodo Dragon, a new open source web browser, more than half of all sites using SSL certificates may be unsafe. This is because these days, it’s very easy to buy an SSL certificate and validate your website. This trend is mainly a result of a huge spike in …

January, 2010

  • 29 January

    How to enable HTTPS on a Windows server

    SSL stands for Secure Socket Layer and is the underlying technology that enables a website to use the HTTPS protocol. Why is this important? A website with an HTTPS URL provides website visitors with a secure connection for private transactions. It is essential for any type of online sales or …