This Day On The Street
Continue to site right-arrow
This account is pending registration confirmation. Please click on the link within the confirmation email previously sent you to complete registration.
Need a new registration confirmation email? Click here
Stocks Under $10 with 50-100% upside potential - 14 days FREE!

The Digital Skeptic: Amateurs Are Taking Over, and Risking, Web Security

In 2011, the government of the Netherlands released a harrowing must-read account of the hacker takedown of a large Dutch certificate authority called DigiNotar. The frankly not terribly sophisticated attack effectively bankrupted the company and vaporized a $12.9 million investment by a firm called Vasco, which had bought DigiNotar earlier that year.

Not surprisingly, similar but bigger CAs such as DigiCert and Entrust have invested in ambitious cooperative security plans. But just like the rest of the wobbly Web, the race-to-the-bottom digital age economics makes law and order elusive.

"Certificate authorities were complex and lucrative at one point," Alberto Yepez, said managing director at Trident Capital, a major Silicon Valley security venture shop, when we later spoke at another nearby watering hole. "But now they're becoming commoditized."

The upside on Web risk
This all leads to an only-in-the-Internet-age investor upside: Considering that everyone from Facebook (FB) to The New York Times to Burger King (BKC) is mitigating embarrassing, value-affecting security lapses, the crumbling CA infrastructure actually offers a tantalizing lens into which firms take security seriously -- and which do not.

It turns out that the clues lie around in plain sight.

"It varies by browser, but any user can see on any page who the CA is for that page," Wilson told me. And with a bit of practice, he said, just about anybody can get a feel for the security posture of the company creating that Web page.

Wilson says the place to start to see who has security game is with a tool called the SSL Configuration Checker, based on an app from Redwood City, Calif.-based Qualys (QLYS). Any firm's Web page scoring a B or lower has issues to answer for. If you want to humor your deeper, inner security nerd, here's a link to the uber-geek white paper on the topic.

"This is an industry that rewards due diligence," Wilson told me.

But he made it clear: Building a security model that evaluates the level of practical risk a Web company is managing, based on analysis of trusted third parties such as CAs, is a lot of work.

"You'll have to build your own tools," he said. "It's the Wild West out there."

The Wild West on an alien planet, more like it. But somebody has to settle it.

This commentary comes from an independent investor or market observer as part of TheStreet guest contributor program. The views expressed are those of the author and do not necessarily represent the views of TheStreet or its management.
2 of 2

Select the service that is right for you!

Action Alerts PLUS
Try it NOW

Jim Cramer and Stephanie Link actively manage a real portfolio and reveal their money management tactics while giving advanced notice before every trade.

Product Features:
  • $2.5+ million portfolio
  • Large-cap and dividend focus
  • Intraday trade alerts from Cramer
  • Weekly roundups
TheStreet Quant Ratings
Try it NOW
Only $49.95/yr

Access the tool that DOMINATES the Russell 2000 and the S&P 500.

Product Features:
  • Buy, hold, or sell recommendations for over 4,300 stocks
  • Unlimited research reports on your favorite stocks
  • A custom stock screener
  • Upgrade/downgrade alerts
Stocks Under $10
Try it NOW

David Peltier, uncovers low dollar stocks with extraordinary upside potential that are flying under Wall Street's radar.

Product Features:
  • Model portfolio
  • Stocks trading below $10
  • Intraday trade alerts
  • Weekly roundups
Dividend Stock Advisor
Try it NOW

Jim Cramer's protege, David Peltier, identifies the best of breed dividend stocks that will pay a reliable AND significant income stream.

Product Features:
  • Diversified model portfolio of dividend stocks
  • Alerts when market news affect the portfolio
  • Bi-weekly updates with exact steps to take - BUY, HOLD, SELL
Real Money Pro
Try it NOW

All of Real Money, plus 15 more of Wall Street's sharpest minds delivering actionable trading ideas, a comprehensive look at the market, and fundamental and technical analysis.

Product Features:
  • Real Money + Doug Kass Plus 15 more Wall Street Pros
  • Intraday commentary & news
  • Ultra-actionable trading ideas
Options Profits
Try it NOW

Our options trading pros provide daily market commentary and over 100 monthly option trading ideas and strategies to help you become a well-seasoned trader.

Product Features:
  • 100+ monthly options trading ideas
  • Actionable options commentary & news
  • Real-time trading community
  • Options TV
To begin commenting right away, you can log in below using your Disqus, Facebook, Twitter, OpenID or Yahoo login credentials. Alternatively, you can post a comment as a "guest" just by entering an email address. Your use of the commenting tool is subject to multiple terms of service/use and privacy policies - see here for more details.
Submit an article to us!


DOW 17,804.80 +26.65 0.15%
S&P 500 2,070.65 +9.42 0.46%
NASDAQ 4,765.38 +16.9840 0.36%

Brokerage Partners

Rates from

  • Mortgage
  • Credit Cards
  • Auto

Free Newsletters from TheStreet

My Subscriptions:

After the Bell

Before the Bell

Booyah! Newsletter

Midday Bell

TheStreet Top 10 Stories

Winners & Losers

Register for Newsletters
Top Rated Stocks Top Rated Funds Top Rated ETFs