Category Archives: Web Security

two-factor-authentication-for-accounts
05 Oct 2016
Doing business in the Internet often requires a good protection of personal data and money transactions. If you want to buy something from the online store, you must be sure that none will steal your personal data (credit card number, PIN code and etc.). Online merchants who want to succeed in selling things online should make their store and eCommerce websites really safe for their buyers. Many of them use two-factor authentication to prevent illegal activity on their web [...]
Let’s Encrypt
30 Jun 2016
This story dates back to 2015 when the Internet Security Research Group (ISRG) decided to present Beta for the Let’s Encrypt software. The main purpose of this project was to help internet users get a more secure connection between their servers and browsers called Secure Socket Layer (SSL) free of charge. On April the 12th, 2015, the program has abandoned its Beta status and initiated a new wave of changes in the worldwide internet community making millions of users change [...]
SSL Security
06 Jan 2016
Let’s Encrypt is a free, and open certificate authority, run for the public’s benefit. Let’s Encrypt is provided by the Internet Security Research Group and sponsored by Mozilla, Cisco, Akamai, OVH, Google Chrome, Facebook and many others. CDNsun has integrated with Let's Encrypt which allows us to provide free custom SSL CDN certificates to all our clients. So you don't need to spend your money on buying an SSL certificate for your CDN domain from a third-party certificate authority because [...]
How to avoid ddos attacks
01 Sep 2015
DDos attacks became a real problem for most of online businesses nowadays. This way of economic pressure is very popular, because it does not leave any legally relevant evidences. At the same time such attacks can make unavailable almost any computer or system. DDos attacks are based almost on the same principle as Dos attacks. The difference is that DDos attacks use more than one computer as the attack source. Unfortunately, usually it consists of thousands of computers. Attack can [...]
CDN security
15 Jun 2015
Bigger growth of CDN use among all kind of businesses puts bigger queries for a security. The need to protect CDN data arises from the essence of Content Delivery Network mechanism. CDNs are based on a principle of geographically close location of data to end users. That makes request time from the server faster. As a result, the website performance is improving too. To make this possible, CDN customers allow CDN's to locate the selected data on the edge servers. Some of CDN companies have a [...]
Poodle
16 Oct 2014
Have you already heard about the recent vulnerability in SSL called Poodle? As well as other big companies like Akamai, Google or Twitter we have also disabled SSL 3.0 support in our network. We recommend to take this vulnerability seriously and to disable SSL 3.0 on your own servers and browsers. Run the following command in your terminal: openssl s_client -connect your-website.com:443 -ssl3 If you receive an error response like this: 26373:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1099:SSL alert number 40 26373:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:536: Then everything is fine. [...]
SSL Security
22 Jul 2014
This article is going to be about improving security of uploads to CDNsun push servers. Let's first take a look at a short overview of CDNsun services. CDNsun - the best CDN provider at cheap price provides two ultra-fast pull CDN services CDN Static CDN Video two breathtaking push CDN services CDN Static Push CDN Video Push and one unbeatable live streaming CDN service CDN Live Note that the only difference between pull and push CDN services is that with pull your content is stored on your [...]