News

Eligibility Expands for IE Web Certificate

Smaller and newer businesses will now be able to get security certificates that trigger a green address bar in Microsoft browsers under new rules ratified this week.

Smaller and newer businesses will now be able to get security certificates that trigger a green address bar in Microsoft browsers under new rules ratified this week.

Since they became available late last year, the so-called extended-validation certificates have generally been available only to larger companies -- those listed in public databases.

Security companies and browser manufacturers through the Certification Authority/Browser Forum have been hammering out procedures for general partnerships, unincorporated associations, sole proprietorships and individuals as well.

"There are some new steps introduced," said Markellos Diorinos, a product manager with Microsoft Corp. "They need face-to-face validation."

New guidelines call for smaller merchants to produce documents such as a driver's license or a bank statement, according to certificate issuer Comodo. A lawyer or a notary would have to review those documents.

The extended-validation, or EV, system is designed partly to address the rise of "phishing" scams in which Web sites try to mimic legitimate businesses to steal passwords and other sensitive data.

Although certificate issuers used to always check to make sure sites were really what they said they were, newer competitors have tried to cut costs by checking only that the site owns the domain name. Normal certificates may still be issued that way, but the EV ones are reserved only for merchants that pass more rigorous screening.

Microsoft's Internet Explorer 7 browser already recognizes EV certificates. Developers of the Firefox and Opera browsers are also planning similar features.

The appearance of the green bar in IE7 should tell visitors that the merchant does exist and operates at the location it says it does, though it doesn't validate its quality of service.

Featured

  • Microsoft Adding Google G Suite Migration in Exchange Admin Center

    Microsoft's Exchange Admin Center will be getting the ability to move Google G Suite calendar, contacts and e-mail data over to the Office 365 service "in the coming weeks."

  • Qualcomm Back in Datacenter Fray with AI Chip

    The chip maker joins a crowded field of vendors that are designing silicon for processing AI inference workloads in the datacenter.

  • Microsoft To Ship Surface Hub 2S Conference Device in June

    Microsoft on Wednesday announced a June U.S. ship date for one of its Surface Hub 2S conferencing room products, plus a couple of other product milestones.

  • Kaspersky Lab Nabs Another Windows Zero-Day

    Kaspersky Lab this week described more about a zero-day Windows vulnerability (CVE-2019-0859) that its researchers recently discovered, and how PowerShell was used by the exploit.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.