SSL certificates validity period has changed.

3-year SSL Certificates lifetime reduced and here is the guide for you

Recently CAB forum reduced the maximum duration of the SSL certificates from 3 years to 2 years+ (27 months) keeping in mind the inherent security and logistics issues.

Let us consider the new scenario for each type of certificates, as practices/equipment require to replace certificates are infrequently as possible, so you want to use 3-year certificates as long as possible, considering, CAs have chosen to stop issuing products prior to the industry-mandated deadlines. This may mean that some CAs may chose to discontinue issuing 3-year SSL certificates before/by March 2018,if you have an existing 3-year certificate, you will need to revalidate, if you reissue in the last year of its lifetime.

Since, March 1st, 2018 all new SSL certificates will be restricted to a maximum of 825 days (2 years + 3 months renewal buffer). which affects DV (Domain Validation) and OV (Organization Validation) certificates.

 

Reduced Validity of SSL Certificate

Given that this will impact how certificates are deployed and managed, we wanted to put together a quick summary of how this will impact those who use 3-year SSL certificates.

If You have an existing OV certificate:

If you have an existing 3-year SSL certificate then it will continue for 3 years. However,the new mandate will apply from the reissuance of the existing validity period.

Since the change took effect very quickly and has caused a large amount of existing validation information to suddenly expire, which affects both new and existing certificates.

Validation is the process of proving the existence of your legally registered company. When your existing validation information expires, you will be required to re-do this process which will then be valid for the next 825 days

The impact of the same can be gauged by when was the validation effected, which date may not be apparent to you, because it is not necessarily the same as the start date of your certificate. This could effect a 1 or 2-year OV certificate as well,from a technical perspective, reissuing a certificate is the same as issuing a new certificate. This means that after March 2018, ALL newly issued certificates (including reissues) must have a maximum validity of 825 days

If you have a DV certificate

Starting March 2018, DV certificates will now be limited to 825 days. earlier you could continue to get a 3-year certificate and when you re-issue a DV certificate it is already common practice to re-validate domain ownership. This simple practice, which can be performed in a few minutes by setting up a DNS record, uploading a file to your server via FTP, or confirming an email.

If You have an EV certificate

EV certificates are not affected by either of these changes. since they meet the highest standards for identity, EV certificates are already limited to have a maximum of 27 months and validity information can only be reused for a maximum of 13 months

This is as per the latest information received from CAB forum. Subscribe to our blog for latest information and updates.

Tackling the website security skills gap

If you are having trouble finding qualified staff to help you sell, install and service website security solutions? do you have qualified prospects who could be converted into buyers, if you had more time to draft winning proposals? and are you finding it harder to maintain close communications with prospective clients about upgrades and new products? you are not alone.

Trained, experienced and professional website security experts are in short supply and the problem will not solve itself any time soon. 

Education and training

What’s driving the shortage? a host of reasons. It is estimated that global revenues in the website security sector are up 8.6% per annul.  Which means that you need 8.6% more people to support the website security side of your business.

And then there is the speed of the market. online Security updates are literally real-time, which means that upskilling is a constant battle, and then there is the adaptation of the cloud and the resulting security issues. So more business, faster changes and more complex solutions. It’s the perfect storm.

Need to bridge the Skill gaps

What to do? “The Government of India is facing a multi-faceted challenge which requires a variety of tactics to start with, education is essential. But it takes a long time and we need skilled technicians now, both tertiary institutions and the support of the government are doing all they can to speed up the delivery of cyber security graduates but, again, the lack of skilled instructors is hampering efforts. So our focus on very specific hands-on training is required to provide technical staff with the tools, knowledge and back-up support so that they can successfully implement our security solutions.

The need to introduce Certification courses which are designed to give people the requisite knowledge to specify, install and support the efforts of the government of India in skill development. since we can’t fast-track experience but can give people a jump start and that’s what these workshops can do

Automation the key

It is the responsibility of the vendor community to reduce complexity, promote automation and embrace artificial intelligence to reduce the requirement for constant human intervention

Since machines can replace people, but intelligent design can automate many functions that currently require manual intervention such as monitoring, alerting and responses.so to focus on the human aspects, where communication and understanding client requirements are paramount, whilst simultaneously making network administration less complex and time-consuming.

Keep up or keep out

Concluding, cyber security is not for the faint-hearted, since We’re all in the same boat. More challenges, more complexities, more requests. But there are still only 24 hours in a day. We all have to work faster, smarter and do it right the first time. And that’s where cyber security training comes in. The more training, the fewer help-desk calls. and that means happier clients and more sales. So train up your team and watch your profitability maintain momentum.”

Neglecting Website Security can be expensive mistake

Neglecting Website Security can be most expensive mistake, SEC_RITY is not complete without U!

 

Website security comes in various ways, and it has always been a preference to stay secured. No matter where you are, you want to feel safe.
You know that out in the world somewhere, someone would want what you have and it can be anything, for your physical security you can hire bodyguards, you can carry a gun or anything that makes you feel safe,But, what do you do when you are threatened by something you can’t see or touch as far as Website security is concerned? Something that can access all of your private content, and even take it away with them, worried right? You are physically protecting yourself but, what about the digital you? The computer you carry along everywhere you go is not protected at all.
That’s where Website Security comes into play.

Website Security: –

Website security is the body of technologies and process that are solely designed to protect networks, computers and computer programs that can be damaged from an unauthorized access.
The main purpose of Website security is to protect the digital you, everything you have in your computer is at stake. It’s not protected and can be accessed by someone at any time and you need cyber security for that. To make sure that you stay safe, as the saying goes that
“There is no excuse, for computer misuse”.

SSL:-
SSL stands for Secure Socket Layer. Basically SSL is a standard security technology that provides you with secure communications between a web server and a web browser. SSL will use a combination of public and private keys that will encrypt your personal yet important information’s such as your credit card numbers, your login forms, your email addresses, your IP, etc. Moreover

With SSL comes the SSL Certificate.
 






SSL Certificates:-
SSL Certificates are small data files that digitally bind a key to an organizations details. When it’s installed on a web server, it activates the padlock and the https protocol and allows secure connections from a web server onto a web browser.

The browser / server requests that the Web server identify itself. The web server send the browser / server a copy of its very own SSL certificate. The browser checks to see whether or not it’s protocols allow it to check the SSL certificate. The web server will send back a digitally signed approval to start the SSL encrypted session. This link ensures that all data passed between the web server and browsers remains private.
We at https.in provide our clients with the best organization validation SSL Security Certificate. What we provide is something that most of our competitors don’t provide, which are:-

• Verified business authentication SSL Certificate, and will be issued within 2 – 3 days.
• Increased consumer trust as compared to other providers.
• Shows the padlock sign for all the browsers.
• 256 Bit Encryption.

Visit us at https.in and buy a genuine trustworthy SSL Certificate that provide you with the best Website security solutions.