The Power of SSL Certificates in your Domain Management Strategy

Alison SimpsonPortfolio Marketing DirectorMarkMonitor

Ryan WhiteChannel Marketing Manager, Global ProgramsDigiCert

2

§ Symantec Website Security is now DigiCert§ What is SSL?§ Reasons to use HTTPS§ Benefits of using MarkMonitor for SSL Certificate Management§ Best practices and next steps§ Q&A

What We’re Talking About Today

On October 31st, DigiCert completed the acquisition of Symantec Website Security

Includes SSL, PKI and related services

Largest Certificate Authority in the World

Strong focus on the Enterprise

All certificates issued from DigiCert hierarchy by Dec 1st

4

SSL provideso Encryption of data in motiono Validation of your site’s or business’ identity

SSL inspireso Assurance of safety and securityo Trust and confidence to submit, transact and proceed

SSL createso Site stickinesso Business uplifto Additional trust indicators

SSL’s Role

5

SSL Certificate Variations

Domain Validation• Encryption

• Validation of domain control

• Padlock in browser

• Issued in minutes

Extended Validation• Stringent, industry-standardized

authentication of organization

• Business-beneficial green address bar in

browser

• Issued in 7-10 days

Organization Validation• Authentication of organization

• Proof of applicant’s right to request cert for

domain

• Organization details in Certificate info

• Blue address bar in Firefox browser

• Issued in 1-2 days

6

SSL Certificate Variations

Domain Validation Organization Validation Extended Validation

POWERPOINT TEMPLATE 0

Authentication Level DV OV EV

Authentication Snapshot Domain-level validation only Domain-validation and organizational authentication

OV plus industry-mandated authentication steps to ensure legitimacy

Use Cases • Blogs• Brochures• Server-to-server

• Logins• Personal Information• Payment/Commerce

• OV plus…• Projecting trust• Improved conversion rates

Ideal For • Non-critical applications• SMB needing basic security

• SMB• Ecommerce with small volume

orders• Online forms

• Ecommerce• Banking

Key Features Issued within minutes$500K warrantyCost effective99% browser ubiquity

Most issued in 1 day$1.25M warrantyFull business authentication99 % browser ubiquity

Green address bar drives increased transactions$1.5M warrantyMost robust business authentication99% browser ubiquity

Brands available Geo Trust Quick SSL, Thawte SSL 123 Geo Trust True Business ID, Thawte SSL Web Server, Symantec

Geo Trust True Business ID, Thawte SSL Web Server, Symantec

Brand profile: Product scope, customers, and usage

Product Scope Customer Type Usage ScenarioPremium product with enhanced product features

High-quality, better-than-

basic SSL

Best-of-basic SSL

Banking, financial, insurance,e-commerce,healthcare

Education, public sector, non-profits,retail, open source

Education, public sector, healthcare, manufacturing

Sites needing to establish trust,login pages, e-commerce,multiple servers and Web sites,sites with sensitive information

Basic Web sites, login pages, e-commerce, multiple servers and Web sites

Initial and basic Web sites, login pages, interstitial pages and servers, e-commerce, multiple servers and possibly Web sites

DigiCert Recommends

9Best Practices for Selecting SSL Certificates

Standard Standard EV

•Server-to-Server communication Recommended Acceptable

•Internal audience Recommended Acceptable

•Customer-facing site, provides general info•Customer appreciates security ASAP Recommended Acceptable

•Customer-facing site, provides or collects sensitive info•Customer wants security, doesn’t need more assurance Recommended Acceptable

•Customer-facing site, collects private info•Customer wants security and assurance•Money moves

Acceptable Recommended

•Desire for protection of entire user experience Acceptable Recommended

•Site has performance / ROI targets Acceptable Recommended

1

5

2

3

4

6

7

Reasons to Use HTTPS

11Copyright © 2017 DigiCert, Inc.

Chrome plans to warn users when pages are insecure (non-https)

Chrome Warnings

12

When passwords are requested over http:

Mozilla Warnings

https://blog.mozilla.org/tanvi/2016/01/28/no-more-passwords-over-http-please/

13

Comparison (data from Chrome)

Jan 2016

% of top 100 sites support

https

% of top 100 sites default to https

39%24%

May 2017

60%56%

% of top 100 sites support

https

% of top 100 sites default to https

14

1. Geolocation (Chrome 50)

2. Device Motion/Orientation

3. Fullscreen

4. getUserMedia (Camera/Mic)

5. Encrypted Media Extension (DRM)

Powerful features only on https

15

§ As much as 5% higher search visibility vs. using HTTP

§ Referral data is always preserved with HTTPS providing greater keyword analytics

Google is using HTTPS as a ranking signal

16

Phishing a Problem for Every Vertical

17

§ Secure your domains in New gTLDs

§ Your own TLD (where applicable)

• Consider a policy to secure all domains

• Creates a secure user experience

• Future proof for industry trends

• Increase your SEO value

• Protect your investment

§ New gTLDs where you have a presence

• Secure end-to-end user experience

• Increase your SEO value

• Maintain browser compliance

New gTLDs and SSL

18

How does your organization currently manage SSL Certificates?

Please select 1 of the options:

§ Spreadsheet§ Management console§ MarkMonitor§ Unknown§ Other

Poll

Benefits of using MarkMonitor for SSL Certificate Management

20

§ All lifecycle functions

§ One portal for domains and certificates

Manage Certificates Within Your Dashboard

21

§ Bulk ordering available

§ All brands and certificate types

§ Seamless workflow and certificate management

Easy Order Process

22

§ Create customized SSL Certificate recommendations based on unique website attributes

§ Leverage multiple flexible, cost-effective SSL Certificate choices from leading Certificate Authorities

Remove the Guesswork

23

1. Utilize management solution that allows quick and secure ordering

2. Centrally manage certs and domains within a single secure online environment

3. Ensure visibility into all issued certificates and track expirations dates

4. Ensure consistency between the domain name ownership (WHOIS), the organization listed within the CSR, and the requesting organization for fastest order processing

5. Never give out private keya) Track the Key Pairs “Movement” within an Enterprise; multi-server environments

SSL Certificate Management Best Practices

24

§ Analyze your domain portfolio to see additional names you might need to secure

• Leverage multiple brands based on needs

• Prioritize based on website value to your business

• Consider adding SSL at time of domain registration

§ Contact your Client Services Manager for more information

Next Steps

Q&A

26

For information on MarkMonitor solutions, services and complimentary educational events:

§ Contact via email: field.marketing@markmonitor.com

§ Visit our website: www.markmonitor.com

§ Contact via phone: US: 1 (800) 745 9229 Europe: +44 (0) 203 206 2220

Thank You!