The username and static password scheme has been widely used for verification online. Nevertheless, many have recognize this scheme as being obsolete as it can no longer be trusted to provide proper authentication online. There are countless of software distributed freely across the Internet that enables the cracking of passwords. There are also hundreds of web sites that displays 'Most Recently Hacked' passwords. To make matters worst, even Network Administration tools can be misused to gain access to the confidential information. Apart from the high-tech tools available to uncover passwords, there are also those that come through social engineering. One popular trick is to operate like a classic con man: Posing as a system administrator, the con man calls your client and offers a new service to be added to your system - "But I need your password to enable the service". Happy with the new feature, the client unwittingly offers the password to the con man. Although relatively inexpensive, the username and password scheme may pose a great threat to the overall security of your operations.
Need for Identity Identity is your most valuable commodity on the Internet. It defines you we are and is essential to doing business and carrying on personal relationships. Unfortunately on the Internet, identity is ambiguous. Forgery is increasingly common, particularly email forgery. Virtually anyone can duplicate your email return address and use it to send false, malicious, and even legally actionable messages using what appears to be your true identity. Internet Users can now protect themselves from E-mail forgery with the use of DIGISIGN™ ID or DIGISIGN™ CORPORATE ID.
Protect your Customers Operating a business over the Internet poses a unique set of security risks that must be minimized. Customers will only submit personal and confidential information, such as credit card numbers, financial information, over the Internet when they are confident of its safety. Success on the Internet depends mainly on your ability to reduce the security breaches that may threaten your organization's site. You should be aware of the following security threats: Spoofing - The low cost of Web site creation and relative ease of copying existing pages makes it all too easy to create forged sites that appear to be published by established organizations. Anyone can now illegally obtained credit card numbers by setting up professional-looking storefronts that imitates legitimate businesses. Disclosure - when transaction information is transmitted over the Internet hackers can easily intercept the transmissions to obtain your customers' sensitive information. Data Tampering - The content of a transaction can be intercepted and tampered during transmission, either maliciously or accidentally. User names, credit card numbers, and dollar amounts sent in the open network are all vulnerable to such alteration.
DIGICERT offers you a complete solution to address the concerns mentioned above. Immediately after installing your DIGISIGN™ SERVER ID, you can establish secured and trusted communications with any customer using a browser from Netscape or Microsoft. |