Xolphin News
7 June 2017
Last March, Google announced to take measures against Symantec, affecting SSL certificates issued by Symantec in Google Chrome. On May 19, a collective proposal has been published, reducing risk for users of Symantec certificates as well as retaining Google Chrome users’ safety. Since the end of May, many conversations have been held regarding the proposals. The entire discussion can be ...
7 June 2017
Xolphin has new general terms, which replace the old general terms. What has changed? The previous terms were outdated and have been entirely rewritten. The new terms are more readable and explanations about new products like vulnerability scans have been added. The terms and conditions are available in multiple languages and can be downloaded in PDF easily. There is also ...
12 May 2017
Since thursday night the 11th of May, Comodo suffered from a serious database disruption for quite some time, which made it impossible the execute their CA activities. Due to this they weren’t able to process Comodo requests. By now the disruption has been resolved and the work resumed. What was going on? Comodo uses a database, located in multiple, ...
24 March 2017
In response to recent incidents at Symantec, Google has announced they will be taking measures affecting certificates issued by Symantec. They have announced plans to stop showing Symantec Extended Validation certificates as Extended Validation as well as adjusting the validity period for Symantec certificates. What happened at Symantec? In the past months, it has become known that Symantec issued a ...
23 February 2017
SHA-1 certificates vulnerable to impersonation in theory is nothing new. Back in 2014, shifting to the new SHA-2 algorithm was already being encouraged. Today, a Dutch researcher cracked SHA-1 in practice. What does this mean? After years of research, Dutch researcher Marc Stevens from CWI Amsterdam (Research Institute for Mathematics and Computer Science) cracked the SHA-1 ...
13 December 2016
Google recently announced they will make Certificate Transparency mandatory from October 2017. SSL certificates issued after this date have to comply to the Certificate Transparancy demands, otherwise they will be displayed as untrustworthy. What is Certificate Transparency? Certificate Transparency is an open source system that registers SSL certificates and was developed by Google since 2013. In the classic PKI model ...
13 October 2016
Problems arose today with GlobalSign’s SSL certificates. Visitors of websites secured with GlobalSign certificates may see incorrect errors informing them that the certificates have been revoked. Background The problem is caused by the fact that GlobalSign changed the way their root certificates are signed. By removing a connection between two of these root certificates, browsers see this as the ...
9 September 2016
Google has announced that it will be marking websites that process sensitive information without HTTPS as “non-secure” in Chrome from January 2017. This is part of Google’s goal to adopt HTTPS as the new standard. What will change, exactly? The security indicators have already been updated in the current version of Chrome, version 53, in order to more ...
7 September 2016
Research has shown that the current security indicators used by browsers to warn visitors against non-secure websites are not clear enough. Google will therefore introduce new icons for its Chrome browser. Chrome user statistics revealed that visitors did not respond (enough) to warnings. Warning the visitor against unreliable or non-secure websites is pointless if visitors do not understand ...
29 August 2016
The Xolphin SSL Module for WHMCS makes it easy to sell, request and manage all types and brands of SSL certificates directly from WHMCS. The module is now available free of charge to all Xolphin resellers! What is WHMCS? WHMCS is a commonly used all-in-one tool for client management, invoicing and support for online organisations. WHMCS allows you ...
Our websites
SSL Help Wizard
Call us
Send us a message
SSLCheck
Our SSLCheck will examine your website's root and intermediate certificates for correctness and report any potential issues
