certificate transparency - website security | digicert · make it harder for hackers to impersonate...

1
A fundamental shift in SSL/TLS practices for a healthier security ecosystem What is it? A public record of SSL/TLS certificates issued for domains on the internet. SSL/TLS How does it work? Certificate Authorities (CAs) like Symantec and other entities set up publicly accessible, tamper-proof Certificate Transparency Log Servers. Who logs certificates in these servers? Certificate Authorities can log certificates as part of SSL/TLS issuance. In fact, all certificates issued by Symantec are logged automatically. We even offer privacy options that reveal only root domains so any sensitive subdomain data remains hidden. This way, even certificates issued prior to Certificate Transparency becoming standard practice may appear in the logs. Anyone who runs across an unlogged certificate can log it on a public server. See all certificates under your domains, quickly spot questionable ones (including development certificates, malicious certificates or those bought from the wrong supplier), and take action quickly. Make it harder for hackers to impersonate your brand by creating a convincing fake website. Good for the internet Good for your customers Good for your business Simplify your certificate management. 1. Protect your brand’s reputation online. Increase trust and confidence across the entire SSL/TLS certificate ecosystem. WEB CRAWLERS Who can access the logs? What are the benefits of Certificate Transparency? Anyone, including: DOMAIN OWNERS IT MANAGERS CERTIFICATE CHECKERS SECURITY APPS CERTIFICATE TRANSPARENCY ................................................................ ................................................................ ................................................................ ANY WEB USER BROWSERS 2. 3.

Upload: others

Post on 13-Oct-2020

5 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: CERTIFICATE TRANSPARENCY - Website Security | DigiCert · Make it harder for hackers to impersonate your brand by creating a convincing fake website. Good for the internet Good for

A fundamental shift in SSL/TLS practices for a healthier security ecosystem

What is it?A public record of SSL/TLS certificatesissued for domains on the internet.

SSL/TLS

How does it work?Certificate Authorities (CAs) like Symantec and other entities set up publicly accessible, tamper-proof Certificate Transparency Log Servers.

Who logs certificates in these servers?

Certificate Authorities can log certificates as part of SSL/TLS issuance.In fact, all certificates issued by Symantec are logged automatically.

We even offer privacy options that reveal only root domains so

any sensitive subdomain data remains hidden.

This way, even certificates issued prior to

Certificate Transparency becoming standard

practice may appear in the logs.

Anyone who runs across an unlogged certificate can log it on a public server.

See all certificates under your domains, quickly spot questionable ones (including development certificates, malicious certificates or those bought from the wrong supplier), and take action quickly.

Make it harder for hackers to impersonate yourbrand by creating a convincing fake website.

Good for the internetGood for your customersGood for your business

Simplify your certificate management.1.

Protect your brand’s reputation online.

Increase trust and confidence across the entire SSL/TLS certificate ecosystem.

WEB CRAWLERS

Who can access the logs?

What are the benefits of Certificate Transparency?

Anyone, including:

DOMAIN OWNERSIT MANAGERSCERTIFICATE CHECKERSSECURITY APPS

CERTIFICATE TRANSPARENCY

................................................................

................................................................

................................................................

ANY WEB USER BROWSERS

2.

3.