Latest Press Releases

TrustToolbar Plug-in made available for free download

Public Preview Beta Release Version 1 now available

Comodo helps build trust on the Internet with new Security Product

TrustToolbar gives the ability to 'trust what you see'!

Kent, UK, 10 June 2002. Comodo has today released a Public Preview Beta Version as an introduction to its exciting new Internet trust product, which brings new levels of confidence to Internet users.

According to Chief Security Architect of the Comodo Group, Melih Abdulhayoglu, "Legitimate websites can be imitated and spoofed by fraudsters with ease, as a result the end users and legitimate websites are vulnerable to attack. The fact that there is an inability for the Online Merchant to identify itself as a legitimate commercial entity to their customers is a major inhibitor for the success of e-commerce. TrustToolbar helps to overcome this fundamental problem, and overcomes it in such a way that requires no extra actions or education by the user, and of course delivers such assurance trustworthily".

The standard Address Bar in Internet Explorer is the user's interface to the Internet - all navigation and location information is provided by the Address Bar. However, as the standard Address Bar can be redrawn and manipulated by a website, reliance on the Address Bar leaves the user vulnerable to spoofing attacks. TrustToolbar, a free Internet Explorer browser plug-in from Comodo, addresses and overcomes this problem by providing security and enhancing the functionality of the Address Bar.

By replacing the current insecure Address Bar, TrustToolbar reduces the user's vulnerability to web based attacks such as webspoofing, trapping and SSL exploits. This is achieved because TrustToolbar can always be trusted to deliver both web location and website identification information to the user. It cannot be switched off, hidden or faked by any website visited by the user - it remains completely out of the control of the website. This is because it utilises the power of the Operating System to beat any attacking website (which has no choice but to act within the constraints and limits provided by the browser, which is less powerful than the operating system!).

The majority of the standard Address Bar is under utilized, and when it is, it is only filled with extensive and seemingly random URLs - meaningless to the user. TrustToolbar converts otherwise wasted space to display instantly recognizable user-friendly information. As well as the standard URL, TrustToolbar provides the Company Name (Legal Name), Company Logo and country of incorporation of the corporate entity behind the current website. And when needed, additional company information, such as address, VAT number, telephone / fax numbers, etc may be retrieved with the click of button. Furthermore, if the Merchant has been authorized to accept specific Payment Methods (e.g. Visa, MasterCard, American Express, etc), the relevant payment flags are also displayed on TrustToolbar thereby creating a standard place mat where payment acceptance logos should be displayed. And because all such information is delivered using the TrustToolbar interface, it remains out of the control of the website and can be trusted as being authentic.

The result of all these combined factors is that the user, as well as having a user-friendly means of surfing the web, is considerably less vulnerable to unwittingly becoming the victim of a fraudulent website - it is now possible to verify the true identity of the website being browsed. If the company is a legally recognized entity - TrustToolbar can be used to provide this information to the user. Furthermore, Corporate identities or the brands are not open to abuse and theft by fraudsters and imitation websites.

TrustToolbar displays Digitally Signed information. This information is provided to TrustToolbar in the format of an X.509 Digital Certificate, issued by the Comodo Certification Authority (CA). Like multimedia objects, a TrustToolbar Certificate is easily implemented into a website's code, and may if preferred be stored at a central location - in other words the Merchant need not change anything to benefit from the TrustToolbar system. The Certificate is digitally bound to the Merchants URL (or range of URLs). This ensures that a Certificate will not be verified as legitimate by TrustToolbar on any site apart from the one intended! Even if the Certificate is copied, it will remain valid only for the site it is issued to - if a fraudster attempts to change this "authorized site" information from within the Certificate, TrustToolbar will notice that the digital certificate has been tampered with when its Digital Signature fails, and as a result, will fail the verification.

TrustToolbar, apart from its primary security functionality, offers many other powerful features. For example it may also be used to search for a commercial website through the use of verified and digitally signed corporate information such as the company name, telephone/fax number, postal address, VAT number, keywords or even a trademark. TrustToolbar allows the user to simply enter a company's name or even its telephone number in order to go to its website - there is no longer the need to remember a URL! When a company applies for a TrustToolbar Certificate, as well as Company details (such as Legal Name, URL, Address, VAT Number, telephone /fax numbers) the company may add additional information such as Keywords and Business Description. The user may view such information through the TrustToolbar Search Interface.

As a result the user need only remember one user-friendly unique identifier for a company, unlike today where we are required to remember both a company's Legal Name and their web address. For example, instead of entering http://www.camcon.co.uk, the user need only enter, and be required to remember, "Cambridge Consultants" - their commercial operating name. As well as proving to be extremely user friendly, the fact that the company already has the its Legal Name it helps prevent cyber squatting!

In summary, TrustToolbar allows the way we browse to become safe and secure by displaying Digitally Signed, trustworthy information. TrustToolbar, therefore, makes possible one of the most fundamental aspects of e-commerce, "the ability to establish trust"! Ultimately, no additional actions are required on the user's behalf to benefit from the system - you simply trust what you see on the TrustToolbar!

A full release version of TrustToolbar will be available shortly.

About Comodo:
Comodo provides next generation E-commerce Security Solutions. E-business is the most exciting revolution of our age and offers an unimaginably vast potential if - and only if - the challenges of real security are successfully met. Comodo offers "one stop" security for today's businesses and consumers; a comprehensive, user friendly infrastructure designed and integrated with exciting new hardware and software security and digital signature products and services.