[OPLIN 4cast] OPLIN 4cast #521: HTTPS is going to be absolutely everywhere...eventually

[OPLIN Support]

Email not displaying correctly? View it in your browser.
<http://www.oplin.org/4cast/>
[image: OPLIN 4Cast]

OPLIN 4cast #521: HTTPS is going to be absolutely everywhere...eventually
December 21st, 2016

[image: HTTPS security] You've likely already noticed that many websites,
including the Dynamic Website Kits <https://oplin.ohio.gov/webkit> that
OPLIN manages, now have URLs that often begin with "https://" rather than
"http://." That's no accident; we've been buying and installing SSL (Secure
Socket Layer) certificates for a while now. Why are so many sites, not just
OPLIN's,  now sporting the extra security? In a nutshell, it's additional
protection. Next month, January 2017, Chrome will even begin showing a
warning to users when they visit sites without HTTPS
<https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html>,
marking those sites as insecure.  If your library's website doesn't already
have HTTPS, better get ready.
- HTTPS Everywhere: Security is Not Just for Banks
<https://www.lullabot.com/articles/https-everywhere-security-is-not-just-for-banks>
[Lullabot]
"What exactly does HTTPS give us? It’s two things, really. First, it’s a
way to ensure data integrity and make sure that traffic sent over the
internet is encrypted. Secondly, it’s a system that provides
authentication, meaning an assurance that the site a user is looking at is
the site they think they are looking at."
- Beginner’s Guide To Website SSL Certs
<http://www.hongkiat.com/blog/ssl-certs-guide/> [Hongikat] "SSL behaves as
a digital passport which verifies the credentials of both yourself and the
end web server. When both identities are verified, SSL grants a secured
connection through HTTPS. This process is performed using certificates."
- HTTPS does not secure your website
<https://perezbox.com/2015/07/https-does-not-secure-your-website/>
[PerezBox] "The actual act of securing a website is a very complex process.
HTTPS does not stop attackers from hacking a website, web server or
network. It will not stop an attacker from exploiting software
vulnerabilities, brute forcing your access controls or ensure your websites
availability by mitigating Distributed Denial of Services (DDOS) attacks."
- How does HTTPS actually work?
<http://robertheaton.com/2014/03/27/how-does-https-actually-work/> [Rob
Heaton] "Whilst the little green padlock and the letters 'https' in your
address bar don’t mean that there isn’t still ample rope for both you and
the website you are viewing to hang yourselves elsewhere, they do at least
help you communicate securely whilst you do so."

*Articles from Ohio Web Library <http://ohioweblibrary.org>:*

   - Digital Privacy Is Important Too
   <http://search.ebscohost.com.proxy.oplin.org/login.aspx?direct=true&db=cph&AN=113772833&site=ehost-live>
[Computers
   in Libraries. Mar2016, Vol. 36 Issue 2, p23-24.]
   - Bitly Embraces Let's Encrypt for Short Link Security
   <http://search.ebscohost.com.proxy.oplin.org/login.aspx?direct=true&db=buh&AN=115473530&site=ehost-live>
[eWeek.
   5/18/2016, p4-4.]
   - Analyzing proposals for improving authentication on the
   TLS-/SSL-protected Web
   <http://search.ebscohost.com.proxy.oplin.org/login.aspx?direct=true&db=buh&AN=118832930&site=ehost-live>
[International
   Journal of Information Security. Nov2016, Vol. 15 Issue 6, p621-635.]

------------------------------
The *OPLIN 4cast* is a weekly compilation of recent headlines, topics, and
trends that could impact public libraries. You can subscribe to it in a
variety of ways, such as:

   - *RSS feed.* You can receive the OPLIN 4cast via RSS feed by
   subscribing to the following URL: http://www.oplin.org/4cast/
   index.php/?feed=rss2.
   - *Live Bookmark.* If you're using the Firefox web browser, you can go
   to the 4cast website (http://www.oplin.org/4cast/) and click on the
   orange "radio wave" icon on the right side of the address bar. In Internet
   Explorer 7, click on the same icon to view or subscribe to the 4cast RSS
   feed.
   - *E-mail.* You can have the OPLIN 4cast delivered via e-mail (a'la
   OPLINlist and OPLINtech) by subscribing to the 4cast mailing list at
   http://lists.oplin.org/mailman/listinfo/OPLIN4cast
   <http://lists.oplin.org/mailman/listinfo/OPLIN4cast>.

© 2016 Ohio Public Library Information Network
[image: Find us on Slideshare] <http://www.slideshare.net/oplin>  [image:
Find us on Facebook] <http://www.facebook.com/oplin.org>  [image: Find us
on Google+] <https://plus.google.com/107751358238995507967>  [image: Find
us on Twitter] <http://www.twitter.com/oplin>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oplin.org/pipermail/oplin4cast/attachments/20161221/30045055/attachment.html>