(pressebox) (Koeln, 03.10.2019) Whether you're building a website for school, launching a side project, or expanding your business's online presence, there are basic steps to take to protect your website's content and your users' information (especially if you are collecting personal or financial information).

1. Install a SSL certificate. As a website creator, you should ensure that traffic to your website is HTTPS-encrypted. By encrypting traffic to a website, you ensure that any communications to or from that website cannot be seen by an eavesdropper. If you were to mail a letter that contains a private message or your personal information, would you rather send it on a postcard or in an envelope? The envelope is the physical equivalent of HTTPS because it prevents parties who have access to the envelope on its way to the recipient from reading or changing its contents.

Installing SSL allows you to encrypt data on your website. Websites that have an SSL certificate use HTTPS, as opposed to HTTP (which means that a connection is not encrypted). Major browsers may also show a lock sign next to a secure connection and warn users if the website is not secure.

How to get SSL:
You can buy webspace at Secura GmbH and get at one click installed SSL for free or you fetch yourself free certificates at Let's Encrypt

2. Make sure your entire website is encrypted. Many website owners donft realize that a single page that isnft encrypted could potentially be used to gain access to the rest of the website. To avoid this, you need encryption on your entire website, not just for pages that are collecting credit card numbers or log-in info. Even unencrypted landing pages that redirect to an HTTPS page can pose risks. A single page that is unencrypted can become a backdoor for bad actors to snoop on the rest of the site.

How to ensure encryption:
 

• Use a top-level domain that is HSTS-preloaded. The HSTS preload list is a list of websites which modern browsers will only load over an encrypted connection. The fastest way to get on this list is to use a top-level domain that's already on the HSTS preload list, like .app, .dev, or .page. Any website on those extensions gets the security benefits of HSTS-preloading from day one, so all you need to do is install your SSL certificate. 
• Alternatively, you can add your website to the HSTS preload list yourself. Websites can be individually added to the HSTS preload list by the website owner at hstspreload.org . Keep in mind this can be a slow process because the list is manually built into the browser. That means updates to the list are made as new browser releases come out, which can take months to occur for all browsers.

Hans-Peter Oswald

https://www.domainregistry.de/...

https://www.domainregistry.de/...

https:/www.domainregistry.de/...

 

Über Secura GmbH: Abdruck und Veroeffentlichung honorarfrei! Der Text
kann veraendert werden.

Secura GmbH ist ein von ICANN akkreditierter Registrar für Top Level Domains. Secura kann generische Domains registrieren, also z.B..com, .net etc. und darüber hinaus fast alle aktiven Länder-Domains registrieren.

2018 landete Secura beim Industriepreis unter den Besten. Secura gewann 2016 den "Ai Intellectual Property Award 2016" als "Best International Domain Registration Firm - Germany". Beim "Innovationspreis-IT der Initiative Mittelstand 2016" wurde Secura als Innovator qualifiziert und wurde beim "Innovationspreis-IT der Initiative Mittelstand 2016" im Bereich e-commerce auch als einer der Besten ausgezeichnet. Beim Innovationspreis-IT der Initiative Mittelstand 2012 und beim Industriepreis 2012 landete Secura GmbH unter den Besten. Beim HOSTING & SERVICE PROVIDER AWARD 2012 verfehlte Secura nur knapp die Gewinner-Nominierung.

Seit 2013 ist Secura auch bei den Neuen Top Level Domains sehr aktiv. Secura meldet Marken für die Sunrise Period als Official Agent des Trade Mark Clearinghouse an.


ICANN-Registrar Secura GmbH
Frohnhofweg 18
D-50858 Koeln
Germany
Phone: +49 221 2571213
Fax: +49 221 9252272
secura@domainregistry.de
http://www.domainregistry.de
http://www.com-domains.com