More than six months since The Register reported that Virgin Media had failed to move away from weak encryption software used on sensitive areas of its website – the ISP is yet to hit the upgrade button. Tim Erlin, director of security and product Management at Tripwire have the following comments on it.
[su_note note_color=”#ffffcc” text_color=”#00000″]Tim Erlin, Director of Security and Product Management at Tripwire :
“It’s in everyone’s best interest, except for cybercriminals, to use the strongest encryption feasible when communicating with a website. The problem lies in the fact that ‘strongest’ is ephemeral, and what passes muster today falls to attackers tomorrow.
Anyone who operates a high volume website shouldn’t just upgrade their encryption protocol support to the latest and greatest. They should put in place a strategy for continuous updates. This encryption arms race isn’t going to end.”[/su_note][su_box title=”About Tripwire” style=”noise” box_color=”#336588″]
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.