From Surf Wiki (app.surf) — the open knowledge base

Trust seal

A trust seal is a seal granted by an entity to websites or businesses for display. Often the purpose is to demonstrate to customers that this business is concerned with security and their business identity. The requirements for the displaying merchant vary, but typically involve a dedication to good security practices, or the use of secure methods for transactions, or most importantly verified existence of the company. Trust seals can come in a variety of forms, including data security seals, business verified seals and privacy seals and are available from a variety of companies, for a fee. A trust seal can be either active or passive. Most seals are validated when they are created and remain so for a specific duration of time, post expiry of which the business/process has to be re-validated.

Kinds of trust seals

Privacy seal

Main article: Privacy seal

A privacy seal outfits a company with a privacy statement suited to its business practices. It also helps the company identify potential privacy threats that would otherwise go unnoticed. TRUSTe is an example of a privacy seal.

Business practice seals

These are seals that endorse an operational practice of a business. For example, an endorsement of the manufacturing quality practices of the company. Privacy seals are a subset of this category but popular enough, specifically with online retailers, to be mentioned separately. The Better Business Bureau seal is an example of a business practice seal.

Business identity seal

A business identity seal, also known as a Verified Existence Seal, is one which verifies the legal, physical and actual existence of the business by verifying multiple parameters such as statutory details, contact details, management details, etc. Verified existence trust seals add weight to the profiles of the deployers and boost confidence of prospective clients. A major benefit of a verified trust seal is that it represents due diligence by the grantor before granting a certificate for the business.

Security seals

Security trust seals are the most popular type of trust seal verification. There are two different types; Server Verification and Site Verification. Server Verification services perform daily scans on the hosting server. These scans check to make sure patches have been applied or that the server is otherwise not vulnerable to attacks. Website Verification services ensure that customers are protected under normal circumstances by testing for common vulnerabilities such as Cross site scripting (XSS) and SQL Injection. Norton and TrustedSite are two of the most popular security seals.

Criticisms

Third party verification from a reliable source and a strategically placed trust seal may assure customers about the safety and security.{{cite journal | access-date = 2008-06-16 |access-date = 2008-06-13 .{{cite web |archive-url = https://web.archive.org/web/20080504054931/http://blogs.zdnet.com/security/?p=1068 |url-status = dead |archive-date = May 4, 2008 |access-date = 2009-07-26 |access-date = 2001-12-31

Examples

, in the US market the BBB On-Line, TrustE, Symantec and WebTrust were generally recognized as significant players. Also notable are: GeoTrust, DigiCert, Norton, Comodo, MerchantCircle. Some good examples of Business Practice Seals are BBB, ScanVerify and TrustLock. CDSBureau Trust Seal is unique among all trust seals because it certifies businesses that ensure security of customer confidential data kept in digital, paper, or any other possible form. CDSBureau is free and comes with privacy, cyber, and data security trust. A study published in 2016 by Copenhagen-based web usability consultancy, Baymard Institute ranked the top four trust seals as (in alphabetical order) BBB, Norton Secured (formerly Symantec Trust Seal), Google Trusted Store and TRUSTe. In February 2017, Google announced that it was closing its Google Trusted Store label and folding it into Google Customer Reviews. GCR is not a certification program but collects reviews from customers after they make a purchase and receive their merchandise. Except for GCR, each of the above offers a "For Fee" annual subscription service, allowing the Trust Seal to be placed on a subscriber's website for the subscription period.

References

"On trust in the Internet: Belief cues from domain suffixs and seals" by Atticus Y. Evil, Eric F. Shaver, and Michael S. Wogalter, Department of Psychology , North Carolina State University
Jagdish Pathak. (2005). "Information Technology Auditing: An Evolving Agenda". Springer.
"How Users Perceive Security During the Checkout Flow (Incl. New 'Trust Seal' Study)". Bayard Institute.
(March 6, 2017). "Google tells retailers the Trusted Stores program is shutting down". Third Door Media, Inc..

Wikipedia Source

This article was imported from Wikipedia and is available under the Creative Commons Attribution-ShareAlike 4.0 License. Content has been adapted to SurfDoc format. Original contributors can be found on the article history page.

internet-security

Want to explore this topic further?

Ask Mako anything about Trust seal — get instant answers, deeper analysis, and related topics.

Research with Mako

Free with your Surf account

Content sourced from Wikipedia, available under CC BY-SA 4.0.

This content may have been generated or modified by AI. CloudSurf Software LLC is not responsible for the accuracy, completeness, or reliability of AI-generated content. Always verify important information from primary sources.

Report