Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Certificate Reputation for website owners

10 Mar 2015   #1
Brink

64-bit Windows 10 Pro
 
 
Certificate Reputation for website owners

Quote:
Last year, we introduced a new mechanism that Microsoft is building to better protect you against fraudulent certificates on the Web. In this blog post, we are going to explain how we will enable the broader community of site owners to participate in detecting fraudulent certificates and protecting your sensitive personal information on the Internet.

Background

Certificate Reputation allows Microsoft to collect server certificate samples based on telemetry from Windows users and examine them to infer reputation data that helps us protect IE users from fraudulent sites. You can learn more about how certificate reputation works in our post, Certificate reputation, a novel approach for protecting users from fraudulent certificates.

More eyes on data allows for better analysis, but confidentiality is also important

In order to provide an opportunity for Web site owners to analyze this data, we are planning to start sharing our certificate samples with their respective domain administrators. Given the sensitivity of this data, only the owners of the Web sites for which the certificates were issued can see those certificates. This allows the people with the best sense of what's expected to participate in monitoring certificate reputation, while preserving the confidentiality of the individual Web sites.

How will it work?

To see the list of certificates associated with a site, the administrator needs to have an account with the Bing Webmaster Tools and to prove that they own that domain name (as described here). After that, the list of certificates associated with the Web site will be available on the Bing Webmaster Tools dashboard and the administrator can download them for further investigation.

How does this help protect me?

Web site administrators are the best entities to decide on authenticity of certificates reported under their name. If a certificate is not issued correctly (or is fraudulent), the administrator can report it back to Microsoft via the Bing Webmaster Tools so that Microsoft can take appropriate actions, including involving the issuing CA for that certificate or informing other browsers.

Certificate Reputation is being rolled out in preview now in the Bing Webmaster Tools, and you can learn more in their blog post, "Track Certificates to Help Users Stay Safe." If your site uses SSL certificates, we encourage you to try it out and provide feedback via the Bing Webmaster Tools.

Anoosh Saboori, Program Manager, OSG Enterprise Security
Source: MSDN Blogs


My System SpecsSystem Spec
.
Reply

 Certificate Reputation for website owners




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Problem adding website certificate to web browser
Hello, My webmail address has a certificate that needs to be added manually if I want to bypass the nag screen that says the certificate is unsecure. This screen just pisses me off, LOL ;) I followed the procedure to add manually the certificate to both Windows and to Chrome, but even after...
System Security
Odd certificate issue for particular website
Hello, I am having very odd issue with my PC. When I tried to access accounts.google.com, the browsers (chrome, firefox, IE) showed that certificate is not trusted and the option to proceed was not available. Here is the odd part, I can open the URL right after my PC boot up but I can't access...
Browsers & Mail
Website Security Certificate
Hi I'm trying to log in to MyUnisa Website. i get a certificate Error (The security certificate presented by this wesite has expired or is not yet valid) but if i use other computers i can log in but i can't from my Dell Leptop but all other wesite i can log in 100% a OK Please help
Browsers & Mail
website's security certificate
do i have a virus that Microsoft Security Essentials is not picking up or what's going on here, everytime i try to logon to (banking,netflix,newegg) i get this page come up. never happen before today and i didn't download anything in like the past week. thank's for any help on this ...
Browsers & Mail
IE 8 - There is a problem with this website's security certificate.
Hi All, I know this has been discussed to death and im sorry to bring it up, but I cannot get around this error. Almost all https websites I goto are coming up with the microsoft certificate error "There is a problem with this website's security certificate." See.. ImageShack® - Online...
Browsers & Mail
IE9 - Website owners just wont be ready
We had the same thing happen with 8, here an example of what I mean... Electronic Arts One of the biggest game distributers on the planet has still to update some of their websites for IE9 Logging into EA - IE9 Logging into EA - Chrome
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 21:25.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App