EV SSL Certificates -- Not Just for Major Organizations

U.S.-based electronics retailer just one example of EV SSL uptake

DALLAS, July 15 -- It's no secret that phishing attacks continue to grow in number and sophistication. And more and more organizations are taking the appropriate steps to defend against the malicious attacks. Take, for example, U.S.-based ElectronicsShowplace.com, who implemented Extended Validation (EV) SSL digital certificates from Entrust, Inc., to better protect their online customers and ensure confidence in the company's brand.

"We sell thousands of items to hundreds of satisfied customers each month, and our customers deserve the best security we can provide," said Donna Jackson of ElectronicsShowplace.com. "EV SSL is the gold standard of online security systems; it is the best guarantee that we can give our customers that their transactions with us will remain secure."

In a May 2009 survey, the Anti-Phishing Working Group (APWG) reported that there were at least 59,959 phishing attacks in the second half of 2008, pushing the 2008 total past 100,000 incidents.(1) The second-half 2008 attacks occurred on 30,454 unique domain names. Even more unsettling is that 5,591 domains were actually registered by phishers, highlighting the need for organizations of all sizes to upgrade to EV SSL digital certificates

With EV SSL certificates in place, users understand that their trusted Web site displays the organization's name in the easy-to-recognize green address bar within up-to-date browsers. If a phishing attack lured an online consumer to a misleading or malicious domain, the address bar within the browser turns red and a warning message appears to alert them that the phishing site is likely fraudulent.

Organizations of all sizes -- much like ElectronicsShowplace.com -- are making this small investment and implementing EV SSL certificates to secure various public-facing Web sites. This simple enhancement can positively influence brand loyalty, increase consumer confidence and help prevent overall monetary loss from online fraud.

"You don't have to be a major corporation to make the relatively minor investment in EV SSL certificates," said Entrust senior product manager Steve Duncan. "Organizations of all sizes can reap the benefits of EV SSL certificates to help protect their customers from phishing attacks and increase online transactions. It may seem like an unnecessary cost in a volatile economy, but the benefits outweigh any gains made by excluding them from security budgets."

With EV SSL certificates, it's easy for customers to know if a particular Web site is secure. Safe, trusted sites trigger the address bar to turn green, and information about the company operating the site and the certification authority (CA) that issued the certificate is displayed.

Extended Validation refers to rigorous, industry-standard validation methods now used by certification authorities before issuing an SSL certificate. Conceived in response to the growing threats of phishing and man-in-the-middle attacks, Extended Validation SSL certificate standards were established by the CA/Browser Forum.

ElectronicsShowplace.com has been in the e-commerce industry since 2005, offering deeply discounted consumer electronics from hundreds of different manufacturers to both businesses and the general public. Products range from discount computer electronics, office supplies, portable audio equipment, as well as home and small-office appliances.

Entrust Extended Validation SSL Server Certificates are available for purchase through Entrust's Certificate Services Web site at www.entrust.net.

About Entrust

Entrust provides trusted solutions that secure digital identities and information for enterprises and governments in 2,000 organizations spanning 60 countries. Offering trusted security for less, Entrust solutions represent the right balance between affordability, expertise and service. These include SSL, strong authentication, fraud detection, digital certificates and PKI. For information, call 888-690-2424, e-mail entrust at entrust.com or visit www.entrust.com.

Entrust is a registered trademark of Entrust, Inc. in the United States and certain other countries. In Canada, Entrust is a registered trademark of Entrust Limited. All Entrust product names are trademarks or registered trademarks of Entrust, Inc. or Entrust Limited. All other company and product names are trademarks or registered trademarks of their respective owners.

(1) "Global Phishing Survey: Trends and Domain Name Use in 2H2008," Anti-Phishing Working Group, May 2009.