3 ms·
My bank's site is SSLv3-only. Banks do the least amount of security they can get away with, because they do not compete on security and they are insured against
by wolf550e 12y ago
My bank's site is SSLv3-only. Banks do the least amount of security they can get away with, because they do not compete on security and they are insured against loss and the customers indirectly pay for the insurance via fees.
- smt88 12y agoMy friend works for Accenture. Whenever they've tried to pitch a security project to a company, the company has basically laughed in their faces. They'd rather have just paid out for a huge loss of data (think Target and Home Depot) rather than put in the money upfront. They thought the upfront money would be greater. After those aforementioned disasters, things have changed, and Accenture is now (a little bit more) able to sell security projects.