1. Web4Labels 3.1 Connection security via https 04/2016 - nico.delaere@cerm.net

2. 2 Security : connection previous versions vs. version 3.1 Cerm Database Web4Labels website hosted in Datacenter Your customer surfing to web4labels Secured connection (VPN) http:// order.web4labels.com https:// order.web4labels.com

3. 3 Security : Certificate As from web4labels 3.1 http:// connections are not longer accepted only https:// connections are allowed! Using https:// means a certificate is mandatory

4. 4 Security : Certificate Why use certificates, what is the added value? 3 advantages of working with Certificates Privacy (stop looking at my password) Integrity (data has not been altered while it has been ‘traveling’) Trust (you are who you say you are) Certificates are already mandatory by law for webshops in some countries

5. 5 Security : Certificate Important properties of a certificate : A certificate depends always of the URL name of the website A certificate has an anual cost A certificate can only be created/validated by the owner of a domain name There is a default certificate included with the hosting by Cerm *.web4labels.com Example : yourcompanyname.web4labels.com will give a secure connection with a valid certificate

6. 6 Security : Certificate By default the current URL name of your web4labels will be redirected to the new *.web4labels.com name. Example: However, if you want a secure connection with your current URL name You need to buy your a own certificate (your IT partner can assist you) Send the certificate file to us, we load your certificate into your web4labels website

7. 7 Other Security Changes Throttling on login (after x password attempts : lock out for several minutes) OWASP (Open Web Application Security Project) What? Test tool to detect unsecure points in web applications The new Web4Labels passed this test succesful !

8. Thank you