July 01, 2020

Firefox 78 is out – with a mysteriously empty list of security fixes

TLS 1.0 and TLS 1.1 are now considered security risks and blocked by default.

Naked Security

June 30, 2020

Google joins Apple in limiting web certificates to one year

Is it fair to expect everyone to renew all their web certificates every year? Apple says yes, and now Google does too.

Naked Security

June 23, 2020

United States wants HTTPS for all government sites, all the time

Making .GOV domains secure - it'll take "a few years" yet

Naked Security

June 02, 2020

The mystery of the expiring Sectigo web certificate

If you're getting TLS connection errors that suddenly started this weekend, a tired old encryption library might be the problem.

Naked Security

April 14, 2020

TikTok users beware: Hackers could swap your videos with their own

TikTok doesn't use HTTPS for its images and videos - so crooks could swap out the videos you see and you would never know.

Naked Security

March 27, 2020

Firefox 76 will have option to enforce HTTPS-only connections

The aim is to block the browser from reaching the small number of sites that cling to HTTP, closing security risks.

Naked Security

March 04, 2020

Why 3 million Let’s Encrypt certificates are being killed off today

If your certificate gets revoked and you don't renew it, visitors won't be able to get to your site...

Naked Security

February 24, 2020

SSL/TLS certificate validity chopped down to one year by Apple’s Safari

From 1 September 2020, Safari will no longer trust SSL/TLS certificates with more than a year on the clock.

Naked Security

February 18, 2020

Malware and HTTPS – a growing love affair

HTTPS web encryption - blessing or curse? A new SophosLabs report looks at how much the crooks love TLS.

Naked Security