A project that aims to increase the use of encryption by giving away free SSL/TLS certificates has issued its first one, marking the start of its beta program. The project, called Let’s Encrypt, is ...

SSL and TLS are similar technologies because they share a codebase, though one is better than the other. In fact, one is dead, and the other still reigns supreme to this day. By the end of this ...

TLS is the successor to the better-known SSL (Secure Socket Layer) encryption protocol; both are used to secure data communications between browsers and the destination server. The makers of the four ...

After four years and 28 different versions, the Internet Engineering Task Force approved the update to the Transport Layer Security protocol for internet encryption and authentication. The new ...

The researchers, Thai Duong and Juliano Rizzo, are due to demonstrate their Browser Exploit Against SSL/TLS (Beast) at the Ekoparty security conference on Friday, September 23. News of the Beast ahead ...

Software developers are racing to patch a recently discovered vulnerability that allows attackers to recover the plaintext of authentication cookies and other encrypted data as they travel over the ...

In a blog I posted last week, I described that enterprise organizations are encrypting more of their network traffic. This is a mixed blessing in that it can protect data confidentiality and integrity ...

Network encryption is one of the most important security hardening strategies to be adopted in any enterprise infrastructure. It will ensure confidential data transmitted over the wire is encrypted ...

Get ready, everyone -- the next version of PCI DSS is on the books. If it seems like you're hearing that news fairly often, you're not alone. In April 2015, the Payment Card Industry Security ...

A newly discovered vulnerability that allows spying on encrypted SSL/TLS communications has been identified and fixed in the widely used OpenSSL library. The vulnerability, which is being tracked as ...

Two security researchers claim to have found a way of breaking the SSL/TLS encryption that is widely used to guarantee the reliability and privacy of data exchanged between web browsers and servers.