• As we continue moving the community to new software, you may experience bugs, see things out of place or missing. While the forum is ready for posting, it may take at least a few days before things are ironed out and look properly updated. If you experience any issue(s), please let us know.

SSL Alone

linuxse

New member
SSL is not a guarantee of complete safety. Despite the fact that SSL is an encryption protocol, a security measure designed to hide and protect the traffic between the user and the web server, it cannot serve as a guarantor of security. ... When traffic is encrypted via SSH, firewall or router

There is many more things to think about when it comes to security.

1: Age of the company, and Domain... Clearly if a domain is a few weeks or months old then maybe you should be careful. You can check domain age here https://websiteseochecker.com/domain-age-checker/
2: Search Google for information on the company in question.
3: Check the site has a Referrer-Policy, Feature-Policy, Content-Security-Policy, X-Contenet-Type-Options, X-Frame-Options and Strict-Transport-Security Headers:

You can check your site here https://securityheaders.com

*snipped*
 
Last edited by a moderator:

easyhostmedia

Well-known member
You will find all phishing websites (pertaining to be Nike etc.) would never purchase an SSL cert which was a clear red flag if you came across one of these sites, but now with free SSL certs these fraudsters are using these, so you will see the padlock and think the site is secure/trustworthy and safe.
 
Top