Security protocols

In the digital world, security is a fundamental priority. In this guide, we will take a closer look at the reasons why Bolder is a reliable and secure platform for making transactions, storing data and browsing safely. We will go over the key areas that protect your data and your experience on the platform.

Modern encryption and security protocols: TLS 1.3

The TLS (Transport Layer Security) protocol is essential for any website that wants to guarantee the security of data transmitted between the server and users. In Bolder’s case, the platform has implemented TLS 1.3, which is the newest and most robust standard for protecting data in transit.

Why does TLS 1.3 matter? First, this version of the protocol removes many known vulnerabilities that affected earlier versions, such as TLS 1.0 and 1.1, which are now obsolete and not considered secure. TLS 1.3 offers several advantages, such as:

Greater security: The cryptographic algorithms in TLS 1.3 have been optimized to offer greater protection against brute-force attacks and other types of threats.
Improved performance: TLS 1.3 reduces latency by streamlining the “handshake” process between the server and the client, which means connections are both faster and more secure.
Stronger privacy: Using encryption throughout the whole process ensures that even if an attacker intercepts the data, they will not be able to read the information without the correct decryption key.

By implementing TLS 1.3, Bolder makes sure that all transactions, from user authentication to online purchases, are protected against possible data interception or eavesdropping attacks. This creates an effective barrier between your data and cybercriminals.

Valid and properly configured SSL certificates

One of the first signs that a website is secure is the small padlock that appears next to the browser’s address bar. This icon is proof that the website uses an SSL (Secure Sockets Layer) certificate, which guarantees that communication between your browser and the server is encrypted.

In Bolder’s case, the SSL certificate is configured correctly, which provides several benefits:

User trust: Site visitors can see the padlock and know they are interacting with a secure platform. Modern browsers show warnings when a site has no SSL certificate or when the certificate is not valid.
Protection against MITM (Man-In-The-Middle) attacks: SSL protects against attacks in which an attacker intercepts and manipulates the data traveling between the server and the user. With SSL, the data is encrypted, which makes it practically impossible for an attacker to decipher the information.
Data integrity: Using SSL also ensures that the data has not been altered during transmission. This is crucial in e-commerce, where it is vital that orders and transactions are accurate.

By implementing an SSL certificate, Bolder reinforces its commitment to user security and protects both the integrity of transactions and the confidentiality of data.

Forced redirect to HTTPS through HSTS

HSTS (HTTP Strict Transport Security) is a security policy implemented by Bolder that guarantees you always access the secure version of the website, using HTTPS instead of HTTP. This is important because HTTPS provides an additional layer of security by encrypting communication between your browser and the server.

How does HSTS work and why does it matter? When you visit a website that uses HSTS, like Bolder, your browser remembers that it must always use HTTPS for that site, even if you try to access it through an HTTP connection. This offers several advantages:

Prevention of downgrade attacks: Some attackers try to trick the browser into using an insecure version of the protocol (HTTP instead of HTTPS). HSTS prevents this by forcing the browser to always use HTTPS.
Greater security on repeat connections: Once your browser has accessed the site through HSTS, it will always force the use of the secure version, which minimizes the chances of your data being exposed on future visits.
Elimination of HTTP-derived vulnerabilities: HTTP does not encrypt data, which makes it vulnerable to attacks such as “eavesdropping” (listening in on conversations). With HSTS, these risks are completely eliminated.

Implementing HSTS in Bolder reinforces the security of connections and protects users against a variety of attacks based on manipulating communication protocols.

Email authentication with SPF, DKIM and DMARC

One of the most common problems in e-commerce is phishing, or identity impersonation. Attackers try to send emails that appear to come from a trusted source, such as the online store, to steal users’ information. To prevent this kind of attack, Bolder has implemented three essential email authentication measures:

SPF (Sender Policy Framework)

SPF is a mechanism that lets Bolder specify which servers are authorized to send emails on its behalf. This means that if an email does not come from an authorized server, it is likely to be marked as spam or rejected.

Phishing prevention: By implementing SPF, Bolder prevents attackers from sending forged emails on its behalf. Mail servers that receive messages from Bolder check the SPF to make sure the email comes from an authorized source.
Better domain reputation: Good use of SPF also improves the domain’s reputation, which helps legitimate emails reach users’ inboxes and not be filtered out as spam.

DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to the emails sent by Bolder, which allows the receiving server to verify that the message has not been altered in transit.

Message integrity: If an attacker intercepts and modifies an email in transit, DKIM will fail, and the receiving server will know the message is not trustworthy.
Guaranteed authenticity: Emails that pass DKIM verification are proof that they come from the legitimate domain and have not been altered.

DMARC (Domain-based Message Authentication, Reporting & Conformance)

DMARC is an email policy that builds on SPF and DKIM to determine what to do with emails that fail these checks.

Control over failed emails: Bolder can specify whether emails that fail SPF or DKIM checks should be rejected, sent to spam or simply monitored.
Detailed reports: DMARC also provides Bolder with reports on the use of its domain to send emails, which lets them proactively detect and prevent impersonation attempts.

These three technologies work together to ensure that emails sent from Bolder are legitimate, protecting both the platform and its users from phishing and identity impersonation attacks.

Protection against common attacks: Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS) is one of the most common vulnerabilities in websites and e-commerce applications. XSS attacks allow attackers to inject malicious scripts into web pages that other users visit, which can result in information theft, session manipulation or the execution of unauthorized actions.

Bolder has implemented a series of measures to protect its platform against XSS attacks:

Input validation and encoding: The platform ensures that any data entered by users is properly verified and encoded before being used or shown on web pages. This prevents attackers from inserting malicious scripts into forms or input fields.
Filters specific to input contexts: Depending on the context in which the data is used (for example, in the URL, in the HTML or in a file), Bolder applies different validation methods to make sure the data is handled safely at all times.

These measures ensure that Bolder users are not exposed to this type of attack, protecting the integrity of the platform and the privacy of users.