By Jay Lyman E-Commerce Times
11/30/00 12:00 AM PT
Three companies have proposed what they hope
will become the new standard for Web security.
eMarketer Whitepaper: Optimizing the E-Commerce Experience
From the Web to the Contact Center, are you prepared to proactively engage and keep your savvy customers? Read how e-commerce leaders are optimizing their sites with ratings, reviews, live help, Web analytics, mobile and more.
Microsoft,
VeriSign and
WebMethods have teamed up to tighten and speed security on the Internet using a new
technology the companies propose as the next standard for peace of mind on the Web.
Called XKMS, the "key management specification" technology tool is designed to help
programmers combine security measures such as data encryption and digital signatures
with e-commerce applications. Its producers say XKMS will help Internet businesses
streamline Web identity, online authentication, authorization, and payment services.
Based on XML (Extensible Markup Language), the accepted language of e-business exchange,
the security technology was made available Wednesday as the companies submitted XKMS to
Web standards bodies for consideration.
Security Now
XKMS analysts report that companies will be able to quickly finalize contracts and
transactions over the Internet using electronic signatures with the new technology.
Relying on encrypted formulas, digital signatures eliminate the need for a hand-written
signature while ensuring a verified stamp of approval.
"Our new XML offerings, coupled with the XKMS specification released today with our
partners Microsoft (Nasdaq: MSFT) and WebMethods, further arm developers across a broad range of
industries with the tools they need to quickly and easily develop and deploy trusted
e-commerce applications," said Anil Pereira, senior vice president and group general
manager of VeriSign's (Nasdaq: VRSN) Enterprise Division.
Filling a Gap
The new technology, which manages digital keys in electronic signatures, is a welcome
advance in the world of e-commerce and online security.
"As a leading contributor to and proponent of several encryption and PKI standards
critical to the development of the information security industry, we applaud the
efforts of VeriSign, Microsoft and WebMethods to propose a new standard for XML key
management," said Scott Schnell, senior vice president of marketing and corporate
development at RSA Security, which plans to incorporate XKMS in future releases of
its software.
Spreading Security
VeriSign, which also announced a new line of XML specifications on Wednesday, and
rival Entrust have led the way in the use of digital signatures.
Seattle, Washington-based Microsoft and Virginia-based WebMethods, which assist in
business-to-business marketplaces, have both sought to promote initiatives and
technology advances in e-commerce security.
The new security standard unveiled Wednesday should bolster trust in e-commerce and
further expand it through XML, said Jeremy Epstein, principal security architect at
WebMethods.
Open Source Developer Dumps Novell Over Microsoft Deal December 26, 2006
A key open source developer, Jeremy Allison, who cofounded the Samba project, has resigned from Novell in protest over the company's recent agreement to enter a collaborative arrangement with Microsoft. The deal has created an uproar in the open source community because it does not treat all recipients of the GPL equally and thus violates the spirit of the license, critics say.
Financial Firms Tap Microsoft for Linux December 22, 2006
Three major financial institutions are among the first companies to go to Microsoft for Linux services, provided through an agreement the software giant struck with Novell. Although a recent survey showed customer approval of the collaboration, many members of the open source community view Novell's move as sleeping with the devil.
Mozilla Beefs Up Security in Firefox 2.0 December 21, 2006
Mozilla's latest update to its open source Firefox browser includes security measures targeting phishers. Phishing scams that use social engineering techniques to dupe Web surfers into revealing personal financial information have become an effective way for cybercriminals to conduct their nefarious activities on the Internet.