1. Fixing TLS Scott Rea VP GOV/EDU Relations & Sr. PKI Architect

2. Is SSL Still Secure? Not according to the media…

3. Is SSL Still Secure? Some high profile stories: – DigiNotar – Theoretical attacks: BEAST, CRIME, BREACH, etc. – Weak cipher suites – Weak algorithms – Weak private keys – NSA and the Snowden revelations What do most potential exploits have in common? They rely on improper SSL implementation.

4. What can we do better? 51% of enterprises do not know all of the keys and certs on their network *. About 2 in 3 enterprises still use ciphers vulnerable to BEAST. Most have migrated to 2048-bit key sizes or higher. SHA-1 to SHA-2 migration is next. * Based on research by Ponemon Institute

5. Better implementation is still needed

15. Our tool can help To download and use the free DigiCert Certificate Inspector, contact us at: +1-801-701-9690 https://www.digicert.com/cert-inspector.htm