Back

Microsoft Beefs Up Azure Security With Cryptography

If you’ve been worried about the Heartbreak virus, here’s some new good news from Microsoft regarding their Azure Web Sites.  Microsoft continuously upgrades their security measures to stay in line with regulatory compliance standards...

2 min read
Published on Jun 26, 2014
Microsoft Beefs Up Azure Security With Cryptography

If you’ve been worried about the Heartbreak virus, here’s some new good news from Microsoft regarding their Azure Web Sites.  Microsoft continuously upgrades their security measures to stay in line with regulatory compliance standards, such as HIPA, FINRA and FISMA.  Agile IT is proud to be a Microsoft Partner and be able to tell our clients in complete sincerity that their information is safe in the Microsoft Cloud.

Microsoft Beefs Up Azure Security With Cryptography

This article excerpt, by Chris Talbot, originally appeared here: https://bit.ly/1itt6Pr

Security may not be as big of a concern when it comes to cloud as it was a few years ago, but it still comes up as an important concern when CIOs are polled. So Microsoft’s (MSFT) latest security upgrade to its Azure Web Sites cloud service makes a lot of sense.

Following security issues surrounding the NSA and the Heartbleed vulnerability, Microsoft has employed elliptic curve cryptography (ECC) to make it more difficult for nogoodniks to break into customers’ offerings on its platform-as-a-service (PaaS).

“Securing your site with SSL has never been more important, but even though encryption isn’t new, cryptographers keep looking for ways to be more secure, and we in Azure Web Sites are always looking for ways to support the latest and greatest,” wrote Erez Benari, program manager for Azure Web Sites, in a blog post.

Benari goes fairly deep into the mathematics of ECC, but in the end, he noted the ECC encryption is harder by a factor of 10 than classic private/public key generation. Not insignificant, by any means, and Azure customers and partners are likely to be the beneficiaries of such cryptography on the Azure Web Sites service.

“What all this means in the real world is that instead of buying a regular SSL certificate to secure your site, you can choose to purchase an ECC certificate instead, thus having better security. ECC certificates are relatively new to the market, and so not many certificate providers offer them. One such provider is Symantec, and another is Entrust, and other providers will soon jump on the wagon as well,” Benari wrote.

This post has matured and its content may no longer be relevant beyond historical reference. To see the most current information on a given topic, click on the associated category or tag.

Related Posts

Common Questions About Azure Migration Answered

Common Questions About Azure Migration Answered

Get answers to the most common Azure migration questions. Learn about costs, best practices, security, compliance, and troubleshooting cloud migration challenges.

Apr 29, 2025
3 min read
AVD vs W365 in GCC high reducing your CMMC scope

AVD vs W365 in GCC High Reducing Your CMMC Scope and Simplifying Compliance

Comparing AVD vs W365 for GCC High? Learn how each can reduce your CMMC assessment scope and simplify security and compliance management in government environments.

Apr 28, 2025
7 min read
Office 365 License Comparison: Business Plans Vs. E5, E3 and E1

Implementing Cybersecurity Policies for CMMC Compliance and Managing CUI

CMMC compliance requires well-documented cybersecurity policies. Learn how to implement security controls, create an SSP and POA&M, and manage Controlled Unclassified Information (CUI).

Apr 25, 2025
7 min read
CMMC compliance for DoD contractors

CMMC Compliance Requirements for DoD Contractors and Subcontractors in the Defense Industry

CMMC compliance is mandatory for DoD contractors and subcontractors. Learn about certification levels, requirements, and the consequences of failing to meet compliance.

Apr 24, 2025
6 min read
How to prepare for a CMMC compliance audit

CMMC Compliance Audit Preparation: A Complete Checklist for Small Businesses

Preparing for a CMMC compliance audit is critical for DoD contractors. Use this checklist to perform a gap analysis, assess CMMC readiness, and prepare for a Level 2 assessment.

Apr 23, 2025
8 min read
FAR CUI vs CMMC Understanding

FAR CUI vs CMMC Understanding the Differences and Overlaps

FAR CUI and CMMC both focus on protecting sensitive federal data, but they have key differences. Learn how they work together and whether FAR CUI compliance aligns with CMMC.

Apr 15, 2025
10 min read

Ready to Secure and Defend Your Data
So Your Business Can Thrive?

Fill out the form to see how we can protect your data and help your business grow.

Loading...
Secure. Defend. Thrive.

Let's start a conversation

Discover more about Agile IT's range of services by reaching out.

Don't want to wait for us to get back to you?

Schedule a Free Consultation

Location

Agile IT Headquarters
4660 La Jolla Village Drive #100
San Diego, CA 92122

Secure. Defend. Thrive.

Don't want to wait for us to get back to you?

Discover more about Agile IT's range of services by reaching out

Schedule a Free Consultation