New Online Security Measures Protect Library Services
Thursday, February 26th, 2004The Libraries recently enabled security on servers which provide access to library services. The servers now use the SSL (secure sockets layer) protocol which protects personal information entered by those using the Libraries’ online resources. Names, addresses, telephone numbers, Social Security numbers are among data now encrypted before transmission.
The online catalog ALICE, the InfoTree Web gateway, and ILLiad document requesting now operate on secure servers. The only online library service for which security is not yet fully in place is electronic reserves. The Libraries’ Systems Department anticipates secure e-reserves being available in the near future.
Visitors to the Libraries’ web site will notice little difference with the security software in place. The site’s URL will display as “https” and a lock icon will appear in the browser display, depending upon browser settings.
The most noticeable change is the appearance of a popup message indicating entry into a secure site. There may also be a warning to the effect that the website’s security certificate is signed by an “unknown” certifying authority. The certifying authority is actually the Libraries and the warning is generated only because the browser has never previously encountered the Libraries’ certificate. It is safe to proceed with the login process. Frequent users of the Libraries’ web site can permanently bypass the warning screen by installing a root certificate ; here is a link to download the root certificate.