1. Latest News
  2. Submit Press Release
  1. PR Home
  2. Latest News
  3. Feeds
  4. Alerts
  5. Submit Free Press Release
  6. Journalist Account
  7. PRNewswire Distribution

Comodo Urges Clarification from Qualys SSL Certificate Marketstudy

Qualys and Ivan, Director of Engineering Commented only 23 million of the sites were actually running SSL. Comodo believes that there is a miscalculation in the research and, urges him to review these figures before confronting to general public

FOR IMMEDIATE RELEASE

 
PRLog (Press Release) - Jul. 5, 2010 - Jersey City, NJ, July 1, 2010 - Comodo urges Qualys and Ivan Ristic, director of engineering at the security research firm to clarify his recent statements made during a webcast and reported by eSecurity Planet.com regarding Qualys upcoming marketplace study on SSL deployments and their shortcomings.

Based on Mr. Ristic’s published comments, Comodo believes that the study will overestimate the number of SSL certificates and incorrectly state the number of those SSL certificates that are invalid because they do not match the domain name on which they reside.

"The methodology of the study is unclear and the paper, once published, could misrepresent the true SSL market and industry, judged by the statements made to the public already", according to Melih Abdulhayoglu, chief executive officer of Comodo.

Ristic’s assertion that "only 23 million of the sites were actually running SSL", is a great miscalculation because commercial Certificate Authorities have sold  substantially fewer than 23 million certificates, according to Comodo.

The claim that 22 out of 23 million SSL servers with certificates in use today are not configured correctly is also a distortion. "Stating that nearly 97 percent of certificates are invalid because they don’t match the domain name is simply incorrect – the majority of those SSL certificates were never acquired for that domain name." Abdulhayoglu said.

For example, a webhost may host 100 domain names on a single IP address. Of those, just three sites are SSL enabled, while the other 97 are not. Qualys study would suggest that there are 100 SSL enabled sites with 97 domains misconfigured due to mismatch of the domain name. Yet, only three domains at that IP address are actually configured for the SSL certificate, while the remaining 97 are not configured for SSL at all.

Comodo believes this over-reporting of 'misconfigured' sites would be a disservice to the general public, could damage the reputations of ISPs, webhosts and Certificate Authorities, and ultimately, could have a detrimental effect on e-commerce.

"Ivan Ristic is an experienced security researcher and is held in high regard by all at Comodo" Abdulhayoglu continued, "but these interim figures paint an inaccurate picture of SSL deployment because they are not properly clarified. We urge him to review these figures before publishing or presenting this to an informed audience."

Comodo has published its latest marketshare findings on http://www.whichssl.com, and has also released an SSL Analyzer tool currently in Beta, available at https://sslanalyzer.comodoca.com/. These resources are free to the public and help organizations and individuals evaluate their SSL certificates and verify their configuration in order to comply with PCI requirements.

About Comodo

Comodo is a leading brand in Internet security. With US Headquarters in New Jersey and global resources in UK, China, India, Ukraine, and Romania, Comodo provides businesses and consumers worldwide with security and trust services, including digital certificates, PCI scanning, desktop security, and remote PC support. Securing online transactions for over 200,000 businesses, and with more than 25 million desktop security software installations, including an award-winning firewall and antivirus software, Comodo is Creating Trust Online®. For more information, visit Comodo's website


For more information, reporters and analysts may contact:
Media Relations
Office: 201-963-0004 x 4073
E-Mail: media-relations@comodo.com

# # #

About Comodo

Comodo is a leading brand in Internet security. With US Headquarters in New Jersey and global resources in UK, China, India, Ukraine, and Romania, Comodo provides businesses and consumers worldwide with security and trust services, including digital certificates, PCI scanning, desktop security, and remote PC support. Securing online transactions for over 200,000 businesses, and with more than 25 million desktop security software installations, including an award-winning firewall and antivirus software, Comodo is Creating Trust Online®. For more information, visit Comodo's website

--- End ---

Click to Share

Contact Email:
***@comodo.com Email Verified
Source:Comodo
Phone:+1 888 266 6361
Zip:07310
City/Town:Jersey City - New Jersey - United States
Industry:Software
Tags:comodo, ssl certificates, certificate authorities, ssl server certificates, ssl analyzer tool, pci scanning, firewall
Shortcut:prlog.org/10776648
Disclaimer:   Issuers of the press releases are solely responsible for the content of their press releases. PRLog can't be held liable for the content posted by others.   Report Abuse

Trending News...



  1. SiteMap
  2. Privacy Policy
  3. Terms of Service
  4. Copyright Notice
  5. About
  6. Advertise
Like PRLog?
9K2K1K
Click to Share