We are planning to carry out maintenance on your Supportworks instance on 1 December, during the agreed window of downtime for a period of at most 1 hour. During this period of downtime, your Supportworks instance will not be available. The maintenance work will involve:
- upgrading Web Client to the latest available version (see release notes: http://download.hornbill.net/webclient/R_WC_1_1_6/FixedInVersion116.pdf)
Paddy’s back after a period of incarceration due to over-exuberant ethical hacking. I thought I’d mark my return with a blog post on security musings. I browsed to trust.hornbill.net and to my delight found that while I had been offline, the guys at Hornbill have installed a certificate on the trust web server.
This is not any old certificate – you can buy certificates very easily and cheaply online with little or no checking – but the one on trust.hornbill.net displays a pretty little green bar in the browser.
You’re probably thinking “nice, but so what?”. You may even be saying “I see one of those every time I visit my bank’s website”. Some of you may not have noticed this at all – outrageous!!
The type of certificate we have is called an Extended Validation (EV) SSL Certificate. The process of purchasing such a certificate is rather involved – you can read about it here http://www.geotrust.com/support/true-businessid/ev-validation-requirements/ – and quite rightly so, as it demonstrates a level of trust and security that you cannot achieve with ordinary SSL certificates. For us, it was worth the wait: we’re not a bank of course, but security is still paramount to us in everything we do. We wanted to demonstrate this to you, which is why we decided to go the extra mile and go EV.
So the next time you are browsing the web, do look out for SSL certificates. And should you look at other cloud-vendor sites, see whether they have an EV certificate. Bet they haven’t!
We are planning to carry out maintenance on your Supportworks instance on 16 November, during the agreed window of downtime for a period of at most 1 hour. During this period of downtime, your Supportworks instance will not be available. The maintenance work will involve:
- Deploying a server service patch
- Applying an additional security lockdown on the Apache webserver.
If you have any questions/queries regarding this maintenance work, please do not hesitate to contact us on email@example.com