35% of websites still rely on weak SHA-1 encryption

Google, Microsoft and Mozilla will stop supporting unsecure sites by the end of 2017

Despite the biggest search engines and browser developers saying they will stop supporting websites using SHA-1 certificates next year, 35% of companies are still using them.

Research by Venafi Labs revealed up to 61 million websites will be affected, with Chrome, Firefox and Edge all displaying messages saying the websites are unsecure when a user attempts to access them.

Other things users may experience include the websites not displaying properly, as browsers strip out non-secure elements, no green padlock appearing and in extreme cases, the websites may be blocked.

"Our whole online world is predicated on the system of trust that is underpinned by these certificates; organisations have an obligation to ensure that this is fixed," commented Kevin Bocek, chief security strategist at Venafi.

Advertisement
Advertisement - Article continues below

"Leaving SHA-1 certificates in place is a like putting up a welcome sign for hackers that says, We don't care about security of our applications, data, and customers."

The reason browser developers are planning to block access to sites using the outdated SHA-1 protocol is the certificates can be easily manipulated by hackers. For example, they can be intercepted and then used to launch man-in-the-middle attacks using TLS connections.

The more secure SHA-2 certificates are more robust, but it would seem some companies are holding back from updating their site security.

"The average organization has over 23,000 keys and certificates and most organizations don't have the tools or visibility to find all the SHA-1 certificates in their environment," Bocek added.

"This means migration to SHA-2 can be complex and chaotic, and, as a result, many businesses have just stuck their heads in the sand. Unfortunately, in January there will be nowhere for these businesses to hide. My advice is to get a plan in place now because it will be even more difficult to fix after the deprecation deadline when things start to break."

Responses to cyber attacks are too reactive. Learn how to monitor and tackle threats to your business much more swiftly by downloading this Intel whitepaper.

Featured Resources

The essential guide to cloud-based backup and disaster recovery

Support business continuity by building a holistic emergency plan

Download now

Trends in modern data protection

A comprehensive view of the data protection landscape

Download now

How do vulnerabilities get into software?

90% of security incidents result from exploits against defects in software

Download now

Delivering the future of work - now

The CIO’s guide to building the unified digital workspace for today’s hybrid and multi-cloud strategies.

Download now
Advertisement

Recommended

Visit/cloud/354231/the-it-pro-podcast-is-the-future-multi-cloud
Cloud

The IT Pro Podcast: Is the future multi-cloud?

29 Nov 2019
Visit/business/business-strategy/354204/google-accused-of-union-busting
Business strategy

Google accused of ‘union busting’

26 Nov 2019
Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019
Visit/business-strategy/collaboration/354160/microsoft-teams-surpasses-20-million-daily-users
collaboration

Microsoft Teams surpasses 20 million daily users

20 Nov 2019

Most Popular

Visit/business-strategy/digital-transformation/354201/boston-dynamics-dog-like-robots-sniff-out-bombs-for
digital transformation

Boston Dynamics dog-like robots sniff out bombs for Massachusetts police

26 Nov 2019
Visit/mobile/google-android/354189/samsung-galaxy-a90-5g-review-simply-the-best-value-5g-phone
Google Android

Samsung Galaxy A90 5G review: Simply the best value 5G phone

22 Nov 2019
Visit/mobile/mobile-phones/354222/samsung-sails-past-apples-market-share-despite-smartphone-market-slump
Mobile Phones

Samsung sails past Apple's market share despite smartphone market slump

28 Nov 2019
Visit/hardware/354232/raspberry-pi-4-owners-complain-of-broken-wi-fi-when-using-hdmi
Hardware

Raspberry Pi 4 owners complain of broken Wi-Fi when using HDMI

29 Nov 2019