Watch out for free SSL certificates!

Watch out for free SSL certificates!

25-02-2016 11:08:36

In December 2015, the site Let's Encrypt began offering a free SSL certificates using the Beta program. Right after that, when the service came into life it noted that in fact they don't give a full credibility.


On the page we can see the prefix HTTPS in the browser. This shows the establishing secure connection to the websites. The certificate ensures then that all transactions are confidential, which is safe for companies operating in e-commerce.


Is it worth to trust?


Businesses know that on trusted sites selling SSL Certificates will count an expense of $ 10 to $ 200. These prices are dependent on what type of protection gives a certificate and what it really involves. The costs can be further increased, because site owners are looking for the lowest available offer. However, there are also those who choose the free option is not always trusted.


Trend Micro has proved that free Certificates are also a tasty morsel for hackers. It is all about distributing malware servers through a gap on the site. Then they break into a site using the free Certificate and get access to the system without the user's knowledge. The process that perform hackers is called "Domain Shadowing" - a technique that allows them to create malicious subdomains on trusted sites. Hackers impersonate a real website and use it to serve ads with malicious software. The owners are not aware of the attack.


Business services should pay special attention to such attacks because of the risk of stealing user's data.

The case was further tested by Trend Micro - they have already sent an official request on the site, which provides the free Certificates.


To avoid such situations you should always use the services of trusted sellers. Data security is the most important thing. See on our site the full range of proven certificates from trustworthy vendors. 

Messaggi recenti

Google AdWords requires an SSL certificate?
03-07-2017 11:56:53

If you run a online business, you are sure to use Google AdWords. Perhaps this is one of the main traffic sources on your site, so the last message you want to see is "Your account has been suspended ...". And yet, you can expect it if your site is not SSL-secured.

Google AdWords requires an SSL certificate?
Comodo and DomenySSL are deprecating SGC
06-07-2016 13:23:42

Starting 1st of August 2016, Comodo and DomenySSL will no longer offer SGC variants of certificates. As your account has a valid SGC certificate which will be up for renewal in the future, the company has prepared a list of recommended alternatives.

Comodo and DomenySSL are deprecating SGC
Thawte pampers clients
04-07-2016 12:22:58

Thawte is only one of the few vendors outside of the United States. As the main competitor of American vendors quickly gained a 40 % share of the market SSL certificates.

Thawte pampers clients
altri post

cyber_Folks S.A. – Cookie settings

Do you like good cookies? We too! Some cookies are required for the website to function properly. Also accept additional cookies related to service performance, social networking and marketing. Cookies are also used to personalize ads. Thanks to them, you will get the best experience of our website, which we are constantly improving. The consent granted voluntarily may be withdrawn or modified at any time. More information about the cookies used can be found in our privacy policy. If you prefer to specify your preferences precisely - see the types of cookies below.

Functional (always active)

These are cookies that are necessary for the website to function. The website will not function fully properly without accepting these types of cookies. Example: A cookie that saves your consent or objection is needed so that we know if we have your consent for certain actions on the website, they will also allow you to log in to the Customer Panel, place an order or contact us via chat.

Analytical and performance

They will make it possible to collect information on how to use the website. These files will allow us to count visits and traffic sources to our site, so we can measure and improve its performance, as well as find out which pages are the most and least popular, and understand how visitors navigate our site. They help us analyze website performance and collect synthetic information. Example: We can make heatmaps, so we know which content is readable and which is not, and this allows for better website design. Thanks to them, we can also see which blog entries were read more often and which less often, which allows us to develop more interesting content. The main tool we use is Google Analytics.


It is social platform cookies that will enable you to be associated with your social media accounts. You can share content from our website there. Social network files (from third parties, such as Facebook) collect information to provide personalized advertising content. For example: Ads on your social media are better suited to you and you reduce the chance of seeing excess ads for already purchased services or products.


These are files related to the operation of marketing automation systems and ad accountability. Thanks to them, we limit, for example, the number of views of a given advertisement. They also allow us to perform comparative tests, thanks to which we constantly improve the operation of our website. By testing multiple page layouts, it is easier to get one that provides the best readability for users. Communication also becomes more personalized. For example, we may give you an article on how to find a domain name when we see that you are looking for a domain and it is difficult for you to find a suitable name. We can also, for example, show you a hint about logging in, if we see several unsuccessful attempts in a row. Based on the information from these cookies and activity on other websites, your interest profile is built. We mainly use the Google and Facebook advertising network.