SOURCE: Varnish Software

Varnish Software

August 03, 2016 09:00 ET

The Financial Times Wins Varnish Innovation Award

Integrates Varnish Cache With Google Apps for a Multi-Factor Authentication Screen Against Social Engineering Hacks

OSLO, NORWAY and LONDON, UNITED KINGDOM and STOCKHOLM, SWEDEN and PARIS, FRANCE and NEW YORK, NY--(Marketwired - Aug 3, 2016) -  Varnish Software, a leader in high-performance digital content delivery, today awarded the Varnish Award for Innovation to the Financial Times and its software architects. The FT, a leader in delivering world-class news, comments and analysis to readers around the world used Varnish Cache to implement multi-factor email login for employees to help protect against the increasing threat of phishing attacks.

Part of the 10-year anniversary celebration of Varnish Cache, the Varnish Awards recognize the best use cases of the world's most popular web accelerator, Varnish Cache. The winners in each category will share their stories on September 22 at the Varnish Summit in Los Angeles, where one grand prize winner will win a full year's subscription to Varnish Plus.

In May 2013, the Financial Times experienced a sophisticated email phishing attack, which would have been more serious had they not created and implemented the multi-factor authentication. Because multi-factor authentication was not comprehensively available for all FT enterprise applications, they integrated Varnish with Google Apps two-factor authentication. This allowed a Varnish server to be placed in front of any existing application to add a multi-factor authentication layer, which works like this:

  • Token-based access: Until the user has a valid, freshly issued token, Varnish will refuse access to the web-server. Those tokens are only issued when the user has been identified by Google authentication and verified against the FT's internal directory servers.
  • Verification: Executed in Varnish Configuration Language (VCL) and inline-C, the process checks the token against the regularly rotated public key.
  • Simple Replication: The entire process is wrapped into a Puppet module so that each FT development team can repeat this pattern for consistent identification, authorization and protection across key business applications.

"This innovative approach to multi-factor authentication, with Varnish Cache at its core, helps organizations ward off increasingly prevalent cyber attacks," said Luke Blaney, software architect at the Financial Times. "Because of VCL, Varnish Cache is flexible and easy to configure. It was the ideal tool to make multi-factor authentication a reality for us."

"Architect Luke Blaney's idea to bridge two unlinked networks for the Financial Times using Varnish Cache illustrates how the software can be used to achieve so much more than caching," said Lars Larsson, CEO of Varnish Software and a member of the Varnish Awards judging committee. "In this case, they used Varnish Cache as the backbone for a multi-factor authentication layer that adds a necessary level of security and protection for all of the Financial Times business applications."

Varnish Cache is a trusted open source HTTP accelerator used to speed up more than 2.5 million websites worldwide including The New York Times, The Guardian, The Hindu, Thomson Reuters, social media and content sites such as Wikipedia, Vimeo, and Tumblr. Of the Top 10K sites on the web, 14 percent use the software.

Join us at the Varnish Summit and Award Ceremony in Los Angeles on September 22.

About Varnish Software
Varnish Software is a high-performance digital content delivery company that helps organizations with web scaling, API management and CDNs. Powered by a uniquely flexible caching technology, Varnish Software's products Varnish Plus and Varnish API Engine, are the indispensable common denominators among the world's most popular websites and brands, such as the New York Times, Vimeo, Tesco, Nikon, and Tesla. Varnish Software's solutions enable organizations worldwide to provide fast and reliable digital content delivery at any scale while giving them the flexibility to maintain control over their content and make the technology their own. Varnish Software has offices in London, New York, Los Angeles, Stockholm, Oslo and Paris.

For more information, visit www.varnish-software.com

Contact Information

  • For further information please contact:
    Hildur Smaradottir
    VP Global Marketing, Varnish Software Group
    email: Email Contact
    Mobile: +47 90181750