Skip to main content

Posts

Showing posts from November, 2014

'Let's Encrypt' aims to drive adoption of HTTPS

Some of the world's biggest security companies are working together to develop 'Let's Encrypt' - a new certificate authority (CA) offering free and automatically renewable HTTPS web encryption. Due to launch next summer,  Let's Encrypt  has been established by Mozilla, Cisco, Akamai, the Electronic Frontier Foundation, IdenTrust as well as researchers at the University of Michigan  - who are working through the California-based Internet Security Research Group (ISRG). The aim is for the CA to drive the adoption of HTTPS web encryption and to do this by making obtaining the SSL certificate as easy as clicking a button or issuing a simple shell command. The accreditation is free to anyone who owns a web domain, certificates can be reviewed for transparency, while the security companies behind the project say that the management software installed on web servers proves that the domain holder controls the website, has obtained a browser-trusted certificate and h

Microsoft Azure faults knock websites offline

Faults with Microsoft's cloud computing platform have knocked many third-party sites offline, as well as disrupting the US firm's own products. Microsoft Azure's status page  says problems began at 00:52 GMT across the globe. Its European operations are taking the longest to fix. Access to Microsoft's Office 365 on-line suite of apps and its Xbox Live gaming facility are among services affected. The faults could set back the company's efforts to sell Azure. Microsoft is attempting to make gains on the market leader, Amazon Web Services, as well as IBM, Google and others offering rival products. Their pitch is that it is more efficient for companies to rent computing power from a large tech firm than owning and managing their own computer servers or going to a smaller provider. "Microsoft is investigating an issue affecting access to some Microsoft services," said Adrienne Hall, general manager at the company. "We are working to restore
WhatsApp has turned on an encryption system to protect messages sent with the Android version of its app. The WhatsApp Android application has been downloaded about 500 million times. It said the data scrambling system should make it much harder to eavesdrop on the messages users exchange. Tech firms have faced criticism by law enforcement figures who said greater use of encryption made it harder to track criminals and extremists. Data scramble The encryption system being applied to WhatsApp is called TextSecure and has been developed by a non-profit group called Open Whisper Systems. "I do think this is the largest deployment of end-to-end encryption ever," said TextSecure developer Moxie Marlinspike  in an interview with tech news site Wired. WhatsApp said the encryption system would be turned on by default for its huge number of Android users. In October, Facebook completed a $22bn (£14bn) acquisition of WhatsApp. Many sites and organisations shy away from