Security history

Websites have always used the http:// prefix which tells a browser it’s a webpage. With the introduction of online payments https:// was introduced, this is a secure version of http://. This security was achieved with an SSL certificate to encrypt communication from you to the website.

This was a great move, but getting the standard web user to always check they are using https and not http was hard. So web browsers added a padlock which was green, this made things easy to spot.

 

Why change?

As time has gone on, scammers and hackers have improved their techniques. As a result, better information in a simply format is needed.

These changes as a web user will be to your advantage. But to a business with a website you might want to take action.

 

What is changing?

The first step in these changes came from Google back in 2014 when they stated websites with an SSL would be ranked better. This step has encouraged business to use SSL certificates on all websites and not just online shopping/banking.

Due to smaller businesses and the requirement for SSL being expanded, this has put more importance on the EV SSL certificates which was ratified by Melih Abdulhayoglu and the CA/Browser Forum in 2007.

This is all well and good, but the end user due to web browsers are not getting a clear message. So during August web browsers like Google Chrome will be changing what they display to help.

The below table shows you what you will expect to see any why.

No SSL CertificateWebsite with no SSLAs you can see from your address bar you will be informed that data sent between you and the site is not secure because no encryption is used.

You are not advised to enter any information on sites like this.

Basic SSL CertificateWebsite with Basic SSLBasic SSL’s provide encryption for communication between you and the website.

These certificates validate the sites address and data is secure.

Submitting information to a site with this is safe during transport, but you cannot be sure who the company is.

EV SSL Certificate

(Extended Validation SSL)

Website with EV SSLThe extended SSL not only provides you with the same protections as basic but also provides website owner information.

The information in the EV SSL has been verified as part of the validation process so you know the company is real.

With this new layout of information you should be able to make an informed decision where you enter usernames and passwords or personal information.

Print Friendly, PDF & Email