Security

Is my information safe?

We are as concerned about data security as you are. After all, everyone at AboutOne uses AboutOne, and we don't want the hackers, phishers, scammers or anyone else reading our private information either.

So, what are we doing about security? A lot. We use the same technologies and practices that banks and other financial institutions use to protect customer information. We even scoured the globe looking for the strictest security standards, and used them as the basis for how we store and transmit your information. Here are some of the things we do:

• We use a state-of-the-art data center - think 'Fort Knox for the Internet' - with cage space in multiple facilities, firewalls, redundant hardware, redundant power sources, redundant battery backups, redundant cooling and redundant cabling, biometric authentication, key card access and video surveillance.
• We use Verisign 128-bit SSL encryption to make your data indecipherable to anyone but you. If you want to learn more about this, read the article below.
• We use McAfee SECURE to continuously test AboutOne with the latest hacker tools and techniques to make sure we aren't vulnerable.

To top it off, we have taken strict precautions to make sure that even AboutOne employees don't have access to your information.  We also never share anything you enter with anyone unless you authorize it.  We take all of this seriously, which is why we have hired TRUSTe to make sure that we honor our committments to you.

Still not convinced? Fill out the contact form to the right and we'll have a security specialist get back to you and answer all of your questions!

What is SSL?

Secure Sockets Layer (SSL): How It Works

Article courtesy of Verisign.

Secure Sockets Layer (SSL) technology protects your Web site and makes it easy for your Web site visitors to trust you in three essential ways:

1. An SSL Certificate enables encryption of sensitive information during online transactions.
2. Each SSL Certificate contains unique, authenticated information about the certificate owner.
3. A Certificate Authority verifies the identity of the certificate owner when it is issued.

Imagine sending mail through the postal system in a clear envelope. Anyone with access to it can see the data. If it looks valuable, they might take it or change it. An SSL Certificate establishes a private communication channel enabling encryption of the data during transmission. Encryption scrambles the data, essentially creating an envelope for message privacy.

Each SSL Certificate consists of a public key and a private key. The public key is used to encrypt information and the private key is used to decipher it. When a Web browser points to a secured domain, a Secure Sockets Layer handshake authenticates the server (Web site) and the client (Web browser). An encryption method is established with a unique session key and secure transmission can begin. True 128-bit SSL Certificates enable every site visitor to experience the strongest SSL encryption available to them.

Imagine receiving an envelope with no return address and a form asking for your bank account number. Every VeriSign® SSL Certificate is created for a particular server in a specific domain for a verified business entity. When the SSL handshake occurs, the browser requires authentication information from the server. By clicking the closed padlock in the browser window or certain SSL trust marks (such as the VeriSign Secured® Seal), the Web site visitor sees the authenticated organization name. In high-security browsers, the authenticated organization name is prominently displayed and the address bar turns green when an Extended Validation SSL Certificate is detected. If the information does not match or the certificate has expired, the browser displays an error message or warning.

Like a passport or a driver’s license, an SSL Certificate is issued by a trusted source, known as the Certificate Authority (CA). Many CAs simply verify the domain name and issue the certificate. VeriSign verifies the existence of your business, the ownership of your domain name, and your authority to apply for the certificate, a higher standard of authentication.

VeriSign Extended Validation (EV) SSL Certificates meet the highest standard in the Internet security industry for Web site authentication as required by CA/Browser Forum. EV SSL Certificates give high-security Web browsers information to clearly display a Web site’s organizational identity. The high-security Web browser’s address bar turns green and reveals the name of the organization that owns the SSL Certificate and the SSL Certificate Authority that issued it. Because VeriSign is the most recognized name in online security, VeriSign SSL Certificates with Extended Validation will give Web site visitors an easy and reliable way to establish trust online.