Welcome to the Proxy Update, your source of news and information on Proxies and their role in network security.

Monday, March 24, 2008

In the News: SSL doesn't guarantee security

Last week we talked about how going to an SSL website doesn't guarantee security. There's still the possibility of viruses and other malware embedded in the website, which would just mean that you're download a virus across an SSL link, making it harder for most proxies to detect the virus. As if to confirm my ramblings I came across this article in the SF Chronicle, talking about viruses embedded in secure sites.

So make sure you're protecting your end-users by using the proxy to either terminate SSL connections and inspect content or blocking access to SSL where appropriate.

No comments: