Web Hosting Services: Are They Secure?
Thursday, March 15, 2018
email authentication, anti-phishing, companies, web hosting, FTC, report

A recent report issued by the Federal Trade Commission (FTC) found that some web hosting services marketing their services to small businesses are not providing email authentication and anti-phishing technologies as part of their standard service offerings. The report, issued by the FTC’s Office of Technology Research & Investigation, examined the security features of hosting plans offered by 11 web hosts that provide their services to small businesses.

The report found that only a few of the hosts reviewed by the FTC notify users of their email authentication technologies while certain of the hosts do not support such technologies. Email authentication protects domains from being used in phishing scams. Domain-level authentication can verify the domain from which a message claims to be sent. In addition, an emailing domain can instruct receiving email servers how to handle unauthenticated messages, and can send a message to receiving servers to send alerts to the emailing domain when spammers attempt to send messages that claim to be from an address at the emailing domain.

On a positive note, the report also found that the majority of web hosts integrate the cost and configuration of SSL/TLS directly into the website creation process, helping to ensure that small businesses take advantage of it. SSL/TLS offers certain assurances to a website’s visitors that they are viewing a legitimate site rather than a fake one. It also enables an encrypted connection between a browser and a server and protects against changes to information exchanged through the website.

The report concluded that small businesses should pay close attention to the security features of the hosting plans being offered by web hosting services and should actively look for plans that offer both SSL/TLS and email authentication technologies. The report notes that although the majority of web hosting services do not offer email authentication as part of their services, these technologies are free to use and implementation costs to web hosting services are most likely to be small.


NLR Logo

We collaborate with the world's leading lawyers to deliver news tailored for you. Sign Up to receive our free e-Newsbulletins


Sign Up for e-NewsBulletins