WebCrossing Server Security Upgrade

Posted by: on Jul 10, 2019 in Uncategorized | No Comments

We think it is vital these days to keep up with the latest security releases and incorporate them in the core WebCrossing server. This new version updates secure connections with an update to the latest OpenSSL libraries for the latest TLS specs.

To be technical about it, the relevant changes in the latest version (1) Enable SHA3 pre-hashing for ECDSA and DSA and (2) Prevent over long nonces in ChaCha20-Poly1305. The new version passes all security checks with an A rating.

If you are using secure connections (https vs http) for your site, we highly recommend upgrading to the latest version. If you are not using secure connections, we recommend you do. These days browsers are getting more and more fussy about connecting to servers which are not secure.

The latest release version is now WebCrossing 6.4-1351 2019-07-01.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server Maintenance Upgrade

Posted by: on Jun 27, 2019 in Uncategorized | No Comments

This new version is useful for sites doing maintenance, such as database repacks. The database backup period field is now saved to webx.set and can be used to override the WebCrossing database setting in the Control Panel. This is helpful when you want to suspend backups while working on DB export or other offline maintenance. 

The latest release version is now WebCrossing 6.4-1350 2019-06-06.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server Security Upgrade

Posted by: on Mar 26, 2019 in Uncategorized | No Comments

We always try to stay on top of security! This new version includes the latest SSL security upgrades, and ensures we maintain our “A” rating from testing sites, such as SSL Labs.

Specifically, the new upgrade deals with these previously known issues: Timing vulnerability in DSA signature generation; Timing vulnerability in ECDSA signature generation; Fixed a bug in DTLS over SCTP which broke interoperability with older versions of OpenSSL like OpenSSL 1.1.0 and OpenSSL 1.0.2; Changed the info callback signals for the start and end of a post-handshake message exchange in TLSv1.3; 

If you are interested in using SSL encryption for the security of your site we recommend this upgrade.

The latest release version is now WebCrossing 6.4-1349 2019-03-19.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server Maintenance Upgrade

Posted by: on Mar 1, 2019 in Uncategorized | No Comments

The purpose of this update is to make it easier for large sites to do a database repack offline without worrying about a live server’s daily backup interfering in the meanwhile. The new feature is a “suspend backups for 10 days” option to ensure the roll-forward file keeps on growing until the repack is done.

This is rather technical. Please bear with me as I explain!

Regular maintenance of large databases is highly recommended. One maintenance activity is “repacking” – a procedure which can substantially reduce the size of a database by reclaiming space no longer in use. While a certain amount of database re-use occurs automatically, repacking actually helps reducethe total size of the database. 

Repacking can be done offline on a separate server, to avoid impacting on the live server process. During repacking it is best to suspend daily backups. When repacking is completed, you can then update your server with the repacked database and it will include transactions which occurred during the repack by reading in the roll-forward filing containing those transactions. So it’s important to ensure that your roll-forward transactions continue to get recording normally until the last step. 

If you have no idea what I’m talking about, but are interested in doing a repack of your large database then please contact support and we will help you if you have an up-to-date maintenance agreement or are hosted in one of our data centers.

The latest release version is now WebCrossing 6.4-1348 2019-02-18.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.

WebCrossing Server New Major Security Upgrade for TLS 1.3

Posted by: on Nov 8, 2018 in Uncategorized | No Comments

We have a new major upgrade of our encrypted security for sites using SSL certificates. Transport Layer Security (TLS) version 1.3 has been approved by the Internet Engineering Task Force (IETF), making it the new industry standard for secure connections. We are keeping up with the latest security standards (safety is number one!) and now the latest WebCrossing Server release supports TLS 1.3.

With the newest version set to become the standard model for securing internet connections, users can expect connections to complete faster due to less clutter in computer-to-computer communication. That same speed increase will also make TLS more secure because much of what was eliminated was old, obsolete encryption.

The security and speed improvements that TLS 1.3 brings are dependent on each other: It’s secure because it’s faster, and it’s faster because of security improvements.

The latest release version is now WebCrossing 6.4-1347 2018-10-31

If you are running a self-hosted site we strongly recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.