The POODLE vulnerability is the latest security breach on secure websites and can enable the theft of data between a user and a website. It can easily be fixed by only using the latest security protocols on the website and disabling an 18-year-old protocol called SSL3.0.
There are a small number of users out there who rely on the SSL3.0, notably users of Internet Explorer 6 (IE6). Released in 2001, IE6 is a web browser developed by Microsoft for Windows operating systems. As it is renowned for its security flaws, most IE6 users have switched to different browsers or upgraded to safer, more modern versions of Internet Explorer.
The POODLE vulnerability, means an attacker can exploit weaknesses in the SSL 3.0 protocol, and potentially intercept a user’s data.
What does this mean for our customers?
As the browser is outdated and has been plagued by so many security issues, most people upgraded long ago, so very few people should be affected by this vulnerability. But to stop any further threats, those who are still using IE6 or other very old web browsers, will no longer be able to access any of our customer’s sites that require a secure connection. All pages that start with “http://” instead of “https://” are unaffected.
The good news is that the proportion of European users who are on old browsers is very small, and almost all internet sites are making the same changes. Some countries with their own character set have older versions of Internet Explorer so if you have users in China, for example, they may be affected.
So if a user cannot access your site, the same will likely apply to your competitors.
The issue of online security should never been taken lightly, and even though you may not be vulnerable to this security breach, ensuring your site is as secure as possible is vital. If you are not on secure hosting then your user’s details are vulnerable to be intercepted. Our protecting your website with HTTPS article outlines what HTTPS is, why it’s important for any website or web application that transmits personal data, and how to do it.
Our friendly, highly experienced team of web designers and software developers are dedicated to helping our clients achieve the outcomes they want. From web design and development, to complex software solutions, we apply our creative and technical know-how to deliver the perfect solution.