20 Dec

Google abandons SHA-1 encryption soon!

Google abandons SHA1 encryption soon!

Google handles well his security plan on the web and it seems to stick to it. Google waits hardly a week between each announcement of a new measure to increase the security or change an aspect of it. When it is not on its search engine, it is on Chrome, its flagship browser.

Websites and browsers encryptent data exchanged between them. A digital signature is created for each data packet to ensure that these data are not altered when transiting servers to servers.

The SHA-1 type of encryption for security certificates has some weaknesses and recommendation made by security authorities in 2011 was to abandon it on 1st January 2016.

Google will go in that sense, and in the course of January 2016, the release of Chrome 48 will present an error when you browse a Web site only with the SHA-1 encryption type.

The error should look like this:

SHA-1 encryption type error

In addition, on 1 January 2017 it will no longer be an alert to be displayed but an error that will completely block the possibility of visiting the site.

Make sure your web hosting company offers a ready SHA-2 environment for 2016 , such as Internet Cloud Canada which has already made the move since a while! Otherwise, your websites will display errors and of course you will lose the trust of your customers because they will not not buy or look at an insecure website!

Share this
18 Dec

Google indexes more intensely HTTPS pages

Google indexes more intensely HTTPS pages

Google announced that the HTTPS pages will be better ranked and prefered according to certain criteria in the positioning of research results. A website secured by a security certificate will benefit from better visibility in the Google search engine.
This process was initiated but it is clear that a visitor must have a private and secure relationship between him and the website. Google will index the default HTTPS pages using the following criteria:

 

– It doesn’t contain insecure dependencies.
– It isn’t blocked from crawling by robots.txt.
– It doesn’t redirect users to or through an insecure HTTP page.
– It doesn’t have a rel=”canonical” link to the HTTP page.
– It doesn’t contain a noindex robots meta tag.
– It doesn’t have on-host outlinks to HTTP URLs.
– The sitemaps lists the HTTPS URL, or doesn’t list the HTTP version of the URL
– The server has a valid TLS certificate.

 

This may seem like a lot of criteria, but in fact it is more exceptions than actually criteria because few pages are in this situation unless you decided it.

We must therefore now obtain an SSL certificate and switch to a HTTPS website to offer a better user experience and SEO results!

Share this
15 Dec

IP addresses list of hackers or malicious individuals

IP addresses list of hackers or malicious individuals

When it comes to cybercrime, you need to evaluate risks, establish strategies and implement solutions to stop hackers or intruders who seeks to destroy either your reputation or your systems.

1st step

You need both the right tools and knowledge or do business with a hosting company who has these qualities to identify and track down cybercriminals.

Step 2

Block access of these individuals on your website. A good way to do this is to use .htaccess files, Web Application Firewall or tools against multiple authentication ( brute force )attacks like Fail2ban.

3rd step

File a complaint to the authority concerned. Most of the time the ISP provides an email address for cases of abuse. In last resort, after having the necessary evidence, speak directly to the police station in your neighborhood.

 

Updated list of IP addresses of malicious people

Internet Cloud Canada will create soon a section displaying the IP addresses of persons who abuse networks. In partnership with several network administrators, this list will be published on our website and enable you to act preventively against these individuals trying to break into your websites or abusing the network.

All of our customers are already protected and the list of IP addresses is immediately updated for them without having to do anything. It is our commitment to offer a healthy network with real statistics and maximum availability of your website here.

We also recommend to read our article of April 2015 by following this link. We show how to block users of the Tor network (Dark / Deep Web), who is recognized as people hiding themselves behind it to carry out their criminal actions.

 

November 2015 list

Until our section on Network Security is completed, here is the updated list for the month of November 2015. You can download the list here. The list is in the form of an .htaccess file. Simply edit the necessary parts for you.

Here is the list as presented in the file:

# BAN USER BY IP
<Limit GET POST>

 order allow,deny
 allow from all
 deny from 193.201.227.158
 deny from 66.187.75.245
 deny from 130.185.82.32
 deny from 217.78.30.163
 deny from 84.240.9.6
 deny from 209.90.88.137
 deny from 188.165.118.117
 deny from 179.61.12.103
 deny from 72.34.34.33
 deny from 5.196.18.168
 deny from 142.4.4.201
 deny from 192.99.100.176
 deny from 198.57.164.33
 deny from 162.144.85.112
 deny from 154.50.0.75
 deny from 142.4.4.201
 deny from 72.34.34.33
 deny from 199.201.110.60
 deny from 198.1.76.21
 deny from 162.144.85.112
 deny from 45.55.241.251
 deny from 207.20.232.240
 deny from 178.32.53.94
 deny from 80.82.64.92
 deny from 89.248.169.36
 deny from 75.127.118.226
 deny from 144.172.233.238
 deny from 74.124.214.251
 deny from 72.34.62.48
 deny from 93.174.141.54
 deny from 198.1.71.253
 deny from 37.187.77.154
 deny from 184.170.151.20
 deny from 211.9.64.2
</Limit>

 

All these IP addresses have done illegal actions on the networks lately. We advise you to block them immediately on your website.

Keep checking our website to discover our future section as well as updates to the list of IP addresses to ban.

 

Share this

© 2018-2023 Internet Cloud Canada.Tous droits réservés. (Sitemap).