What is a website security certificate? Why is it needed?
919095
When you are going to any site using HTTPS all transformation will be done 128 bit encryption mode. And the owner of site will give the certificate stating that he has taken care of security threats while transacting. If you found such certificate is other than what the author sent or if you did not obey the terms then you have option to reject the certificate. By using certificate we are awaring the user
522226
Short for Secure Sockets Layer, a protocol developed by Netscape for transmitting private documents via the Internet. SSL uses a cryptographic system that uses two keys to encrypt data − a public key known to everyone and a private or secret key known only to the recipient of the message. Both Netscape Navigator and Internet Explorer support SSL, and many Web sites use the protocol to obtain confidential user information, such as credit card numbers.By convention, URLs that require an SSL connection start with https: instead of http:. \nAnother protocol for transmitting data securely over the World Wide Web is Secure HTTP (S-HTTP). Whereas SSL creates a secure connection between a client and a server, over which any amount of data can be sent securely, S-HTTP is designed to transmit individual messages securely. SSL and S-HTTP, therefore, can be seen as complementary rather than competing technologies. Both protocols have been approved by the Internet Engineering Task Force (IETF) as a standard.
146079
The Trusted Root Certification Authority feature allows a router to be configured with multiple root certification authorities (CAs) that it trusts. Thus, the router can use a configured root CA (a trusted root) to verify certificates offered by a peer that were not issued by the same CA defined in the identity of the router. When a trusted root is configured in a router, the router does not have to enroll with the CA that issued the certificate to the peer.\n\nThis feature also provides support to other public key applications when different roots are needed to authenticate different components.
778069
You don't need to remove it, because it was tacked on by the server, not you. It's NOT in your source code. \n\nIt says "please remove" because it's aimmed at people who may want to copy the webpage.
118369
1- Get an SSL Certificate from\nhttp://www.verisign.com\nhttp://www.thwate.com\n2- Install that certificate on your webserver, IIS, or Apache\n3- Create a page that contains a form, and that form should be submitted to a script through https://yourservername/scriptname\n4- Server will automatically send the public key of SSL certificate, your form data will be encrypted using that key, and will be posted to script.\n5- Webserver automatically decrypt that encrypted form data and provide that to the script.
1031757
I can't find a direct comparison page, but here are the features of both products:\n\nWebsense\nWeb Security Suite Benefits:\n\n    * Blocks known threats before they reach the endpoint and alerts on potential network threats-Websense Web Security Suite identifies security threats—including spyware, drive-by spyware, bots and bot network traffic, malcode, phishing, pharming, and keylogging—and blocks access at the internet gateway. Websense Web Security Suite also alerts administrators on email-borne worm traffic in the network.\n    * Proactively discovers web security threats-Websense Security Labs mines and analyzes over 450 million websites per week for malicious activity. Real-Time Security Updates are available within minutes of the discovery of a new high-risk threat with no administrative intervention required.\n    * Protects against web security threats before they reach the desktop-Websense Web Security Suite protects organizations from spyware and malcode attacks, phishing and pharming attempts, and other web-based threats.\n    * Stops resident spyware and keyloggers from doing damage-Websense Web Security Suite blocks spyware and keylogger backchannel communications to host servers.\n    * Lowers the risk of intellectual property theft-Websense Web Security Suite lowers the risk of intellectual property theft and malicious attacks through instant messaging (IM), IM attachments, and protocols, such as peer-to-peer, email, file transfer, and others.\n    * Blocks malicious HTTP traffic on all ports-Websense Web Security Suite blocks malicious HTTP traffic on Port 80 and all other ports, closing the “ports” used by sophisticated internet threats and spyware and keylogger backchannel communications.\n    * Swiftly alerts when websites or brands are under attack and reports web server vulnerabilities-Websense Web Security Suite includes the three Websense Web Protection Services which help organizations protect their websites, brands, and web servers. SiteWatcher alerts Websense customers when their websites have been infected with malicious mobile code, allowing them to take immediate action to prevent its spread to customers, prospects, and partners. BrandWatcher alerts Websense customers when their websites or brands have been targeted in phishing or malicious keylogging code attacks. Websense provides customers with security intelligence, attack details, and other security-related information, so that organizations can then take action to protect their customers. ThreatWatcher provides Websense customers with a “hacker's-eye” view of their web server, regularly scanning for known vulnerabilities and potential threats and reporting on risk levels and recommended actions through a web-based portal. With ThreatWatcher, organizations can prevent attacks on their web servers before they happen.\n\n\n\nWebBlocker\nKey Features and Benefits:\n\n    * Far-reaching protection - Prevent access to sites that pose network and security risks including spyware, P2P, webmail, and streaming media sites.\n    * Strong administrative control - Configure up to 40 Web categories to stop the sites and Web tools you most want to block.\n    * Daily incremental database updates - URL database is updated daily to give you the most current protection available.\n    * Flexible configuration - Configure Web access by users, groups, domains, time of day*, and department requirements to meet specific business and user needs\n    * Customizable open-access policies - Create custom "Allowed" exception lists for certain Web sites, host addresses, or URLs so you can keep mission-critical access open.\n    * Acceptable Use enforcement - Allows you to enforce your acceptable use policies to protect your business from legal liabilities.\n    * Centralized logging and reporting - Generate graphical reports of Web access, usage, and time of day for the data you need to make security policy decisions. The Reporting featur
448386
You got it. CISSP is the king of security certs. at the moment.
779225
safe sites are recognized with a small yellow padlock at the bottom of your browser, if the site doesn't display it don't buy anything.  I've shopped over the net for years and never had a problem so far
78679
When you visit a site, check for their security certificates. Some sites use security certificates from proven and trustee companies such as VeriSign. Usually these sites put the logo of VeriSign and the bottom of the site, where you can click and it will redirect you to a page at the VeriSign official website and give you detailed information about the sites security level.\n\nThese sites are pretty much safe, as for the others, all you need to do is watch yourself.
889483
Its fine.  If the security certificate was issued to yahoo.com and you go to yahoo.co.uk, it'll give the the message since the site name isn't EXACTLY what is says on the certificate.
1125942
Verisign quote: "Before you purchase an SSL Certificate, you need to generate a Certificate Signing Request (CSR) for the server where the certificate will be installed. Select CSR generation instructions for your server software. If your server is not listed or you need additional information, refer to your server documentation or contact your server vendor. If you do not know what software your server uses, contact your technical support."\n\nSince you are talking about Yahoo and must be considering a business, you most probably will need to contact the Yahoo Small Business and setup something there. They will provide everything necessary and may even issue what you need to Verisign.
105471
(Public Key Infrastructure) A framework for creating a secure method for exchanging information based on public key cryptography. The foundation of a PKI is the certificate authority (CA), which issues digital certificates that authenticate the identity of organizations and individuals over a public system such as the Internet. The certificates are also used to sign messages
51869
Depends on what your currently doing right now. Of course authentication and authorization are huge topics in the security feild.  But for starters, don't store any plain text data.  Use strong encryption (3DES, Blowfish, AES,MD5, etc...) on any personally stored information.  \n\nTake a trip over to the open source web application securty project and have a look at the top ten list of common web application vulnerabilities. This should be a good starting point for you.
536907
because the site is password protected and need authorization to access.
295698
It may be a Secure Website and you don't have the proper 128-bit encryption set in your browser
1109170
this could be for several reasons:\n\n1) the SSL certificate that is bound to the HTTPS instance is invalid, perhaps expired or has not taken effect yet.  this is ok, it means your data is still protected and you are not the victim of any sort of attack.\n2) the common name (CN) of the SSL certificate does not match the DNS name.  This could be a spoof attack, so you need to verify that what you are trying to connect to matches what the certificate is for.\n3) The certificate is not trusted by a CA (Certification authority) that you trust.  In that case... it really bears scrutiny.  Update your certificat stores from MS or your linux provider.  If you still get the message, start looking for malware on your pc.
950276
United States Computer Emergency Readiness Team:\n"There are a number of significant vulnerabilities in technologies related to the IE domain/zone...ActiveX (etc)...It is possible to reduce exposure to these vulnerabilities by using a different web browser"\nhttp://www.kb.cert.org/vuls/id/713878