{"id":8479,"date":"2012-04-25T17:00:46","date_gmt":"2012-04-25T17:00:46","guid":{"rendered":"http:\/\/www.gaming-awards.com\/NEWS\/?p=8479"},"modified":"2012-04-25T17:00:46","modified_gmt":"2012-04-25T17:00:46","slug":"insecure-websites-to-be-named-shamed","status":"publish","type":"post","link":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/","title":{"rendered":"Unsecure websites to be named & shamed"},"content":{"rendered":"

Soon, companies that do not do enough to keep their websites secure are to be named and shamed to help improve security.<\/p>\n

The list of good and bad sites will be published regularly by the non-profit Trustworthy Internet Movement (TIM).<\/p>\n

A survey carried out to launch the group found that more than 52% of sites tested were using versions of security protocols known to be compromised.<\/p>\n

The group will test websites to see how well they have implemented basic security software.<\/p>\n

\"\"<\/a>

Soon website operators that are poor with security will be named and shamed<\/p><\/div>\n

Security fundamentals<\/strong><\/p>\n

The group has been set up by security experts and entrepreneurs frustrated by the slow pace of improvements in online safety.<\/p>\n

“We want to stimulate some initiatives and get something done,” said TIM’s founder Philippe Courtot, serial entrepreneur and chief executive of security firm Qualys. Who has bankrolled the group with his own money.<\/p>\n

TIM has initially focused on a widely used technology known as the Secure Sockets Layer (SSL).<\/p>\n

Experts recruited to help with the initiative include SSL’s inventor Dr Taher Elgamal; “white hat” hacker Moxie Marlinspike who has written extensively about attacking the protocol; and Michael Barrett, chief security officer at Paypal.<\/p>\n

Many websites use SSL to encrypt communications between them and their users. It is used to protect credit card numbers and other valuable data as it travels across the web.<\/p>\n

“SSL is one of the fundamental parts of the internet,” said Mr Courtot.<\/p>\n

“It’s what makes it trustworthy and right now it’s not as secure as you think.”<\/p>\n

Compromised certificates<\/strong><\/p>\n

TIM plans a two-pronged attack on SSL.<\/p>\n

The first part would be to run automated tools against websites to test how well they had implemented SSL, said Mr Courtot.<\/p>\n

“We’ll be making it public,” he added. “Everyone is now going to be able to see who has a good grade and who has a bad grade.”<\/p>\n

Early tests suggest that about 52% of sites checked ran a version of SSL known to be compromised.<\/p>\n

Companies who have done a bad job will be encouraged to improve and upgrade their implementations so it gets safer to use those sites.<\/p>\n

The second part of the initiative concerns the running of the bodies, known as certificate authorities, which guarantee that a website is what it claims to be.<\/p>\n

TIM said it would work with governments, industry bodies and companies to check that CAs are well run and had not been compromised.<\/p>\n

“It’s a much more complex problem,” said Mr Courtot.<\/p>\n

In 2011, two certificate authorities, DigiNotar and GlobalSign were found to have been compromised. In some cases this meant attackers eavesdropped on what should have been a secure communications channel.<\/p>\n

Steve Durbin, global vice president of the Information Security Forum which represents security specialists working in large corporations, said many of its members took responsibility for making sure sites were secure.<\/p>\n

“You cannot just say ‘buyer beware’,” he said.<\/p>\n

“That’s not good enough anymore. They have a real a duty of care.”<\/p>\n

He said corporations were also increasingly conscious of their reputation for providing safe and secure services to customers.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Non-profit Trustworthy Internet Movement (TIM) will test, monitor and publish web companies that are not as secure as they should be to protect customers online.<\/p>\n","protected":false},"author":3,"featured_media":8483,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[9],"class_list":["post-8479","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-macau","tag-featured"],"yoast_head":"\nUnsecure websites to be named & shamed - iGaming Post<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Unsecure websites to be named & shamed - iGaming Post\" \/>\n<meta property=\"og:description\" content=\"Non-profit Trustworthy Internet Movement (TIM) will test, monitor and publish web companies that are not as secure as they should be to protect customers online.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/\" \/>\n<meta property=\"og:site_name\" content=\"iGaming Post\" \/>\n<meta property=\"article:published_time\" content=\"2012-04-25T17:00:46+00:00\" \/>\n<meta name=\"author\" content=\"Staff\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@igamingpost\" \/>\n<meta name=\"twitter:site\" content=\"@igamingpost\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Staff\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/\"},\"author\":{\"name\":\"Staff\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#\\\/schema\\\/person\\\/38b848f26341d94a3f6b1f5d9642234c\"},\"headline\":\"Unsecure websites to be named & shamed\",\"datePublished\":\"2012-04-25T17:00:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/\"},\"wordCount\":529,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"keywords\":[\"featured\"],\"articleSection\":[\"Macau\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/\",\"url\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/\",\"name\":\"Unsecure websites to be named & shamed - iGaming Post\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#primaryimage\"},\"thumbnailUrl\":\"\",\"datePublished\":\"2012-04-25T17:00:46+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#primaryimage\",\"url\":\"\",\"contentUrl\":\"\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/insecure-websites-to-be-named-shamed\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Unsecure websites to be named & shamed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#website\",\"url\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/\",\"name\":\"iGaming Post News for the B2B Gaming Inudstry\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#organization\",\"name\":\"iGaming Post\",\"url\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/wp-content\\\/uploads\\\/2015\\\/07\\\/iGamingPost-new-2015logo-copy.png\",\"contentUrl\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/wp-content\\\/uploads\\\/2015\\\/07\\\/iGamingPost-new-2015logo-copy.png\",\"width\":400,\"height\":110,\"caption\":\"iGaming Post\"},\"image\":{\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/igamingpost\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/#\\\/schema\\\/person\\\/38b848f26341d94a3f6b1f5d9642234c\",\"name\":\"Staff\",\"url\":\"https:\\\/\\\/gaming-awards.com\\\/NEWS\\\/author\\\/staff\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Unsecure websites to be named & shamed - iGaming Post","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/","og_locale":"en_US","og_type":"article","og_title":"Unsecure websites to be named & shamed - iGaming Post","og_description":"Non-profit Trustworthy Internet Movement (TIM) will test, monitor and publish web companies that are not as secure as they should be to protect customers online.","og_url":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/","og_site_name":"iGaming Post","article_published_time":"2012-04-25T17:00:46+00:00","author":"Staff","twitter_card":"summary_large_image","twitter_creator":"@igamingpost","twitter_site":"@igamingpost","twitter_misc":{"Written by":"Staff","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#article","isPartOf":{"@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/"},"author":{"name":"Staff","@id":"https:\/\/gaming-awards.com\/NEWS\/#\/schema\/person\/38b848f26341d94a3f6b1f5d9642234c"},"headline":"Unsecure websites to be named & shamed","datePublished":"2012-04-25T17:00:46+00:00","mainEntityOfPage":{"@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/"},"wordCount":529,"commentCount":0,"publisher":{"@id":"https:\/\/gaming-awards.com\/NEWS\/#organization"},"image":{"@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#primaryimage"},"thumbnailUrl":"","keywords":["featured"],"articleSection":["Macau"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/","url":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/","name":"Unsecure websites to be named & shamed - iGaming Post","isPartOf":{"@id":"https:\/\/gaming-awards.com\/NEWS\/#website"},"primaryImageOfPage":{"@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#primaryimage"},"image":{"@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#primaryimage"},"thumbnailUrl":"","datePublished":"2012-04-25T17:00:46+00:00","breadcrumb":{"@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#primaryimage","url":"","contentUrl":""},{"@type":"BreadcrumbList","@id":"https:\/\/gaming-awards.com\/NEWS\/insecure-websites-to-be-named-shamed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/gaming-awards.com\/NEWS\/"},{"@type":"ListItem","position":2,"name":"Unsecure websites to be named & shamed"}]},{"@type":"WebSite","@id":"https:\/\/gaming-awards.com\/NEWS\/#website","url":"https:\/\/gaming-awards.com\/NEWS\/","name":"iGaming Post News for the B2B Gaming Inudstry","description":"","publisher":{"@id":"https:\/\/gaming-awards.com\/NEWS\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/gaming-awards.com\/NEWS\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/gaming-awards.com\/NEWS\/#organization","name":"iGaming Post","url":"https:\/\/gaming-awards.com\/NEWS\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/gaming-awards.com\/NEWS\/#\/schema\/logo\/image\/","url":"https:\/\/gaming-awards.com\/NEWS\/wp-content\/uploads\/2015\/07\/iGamingPost-new-2015logo-copy.png","contentUrl":"https:\/\/gaming-awards.com\/NEWS\/wp-content\/uploads\/2015\/07\/iGamingPost-new-2015logo-copy.png","width":400,"height":110,"caption":"iGaming Post"},"image":{"@id":"https:\/\/gaming-awards.com\/NEWS\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/igamingpost"]},{"@type":"Person","@id":"https:\/\/gaming-awards.com\/NEWS\/#\/schema\/person\/38b848f26341d94a3f6b1f5d9642234c","name":"Staff","url":"https:\/\/gaming-awards.com\/NEWS\/author\/staff\/"}]}},"_links":{"self":[{"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/posts\/8479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/comments?post=8479"}],"version-history":[{"count":0,"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/posts\/8479\/revisions"}],"wp:attachment":[{"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/media?parent=8479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/categories?post=8479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gaming-awards.com\/NEWS\/wp-json\/wp\/v2\/tags?post=8479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}