Our Services

Resources Centre

Frequently Asked Questions
e-Booking Service

Frequently Asked Questions

Security Problems

Q1: What is TLS?
A:

Transport Layer Security (TLS) is a protocol designed to enable encrypted and authenticated communications across the Internet. It is used mostly in communications between browsers and web servers. URLs (i.e. web addresses) that begin with 'https' indicate that a TLS connection will be used.

TLS is the standard security technology for creating an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browser remain private and integral. TLS is an industry standard and is used by websites in the protection of their online transactions with their customers. In order to be able to generate a TLS link, a web server requires a Server Certificate.

Q2: How Secure Is Information About Me?
A:

IRIS works to protect the security of your data during transmission by using the Transport Layer Security (TLS) technology. All transactions are automatically encrypted from your browser to our website using TLS. The TLS protocol is used extensively on the Internet and is a well-proven industry standard for browser encryption technology.

While we will continue to implement security controls to protect your data, it is equally important for you to take precautionary measures and proactive steps in protecting your computer and the use of your Login ID and password. Be sure to sign off after using a shared computer.

You are strongly advised to visit the Government's InfoSec Website at https://www.infosec.gov.hk/en/ to keep abreast of the latest information security measures.

 
Q3: Will the search process be protected by the TLS if the user does not log in by using Digital Certificate?
A: Yes, the search process will be protected by the TLS even the user does not log in by using Digital Certificate.
Q4: Why is the session time-out message shown on screen?
A: For security reason, our system will disconnect your connection to the IRIS website after your session has been inactive for a period of time. An alert message will be shown on your screen before the session time-out.
Q5: Why do I have to input CAPTCHA before the first access to the IRIS Online Services?
A: For security reasons, users are required to input a randomly generated CAPTCHA before the first access to the IRIS Online Services.
Q6: Will my online payments for IRIS Online Services be affected if my computer has Internet security software installed?
A: Given the wide spectrum of functionality of the Internet security software on the market, there is no definite answer to this question. We have conducted tests for Kaspersky Internet Security software, and find that a window will show to prompt the user to switch to a protection mode during the payment process of IRIS Online Services. If the protection mode is on, the system will display a message [PAY-E-0000]. We therefore recommend users to add the IRIS Online Services webpage to Kaspersky before using the online payment function. Please refer to the following link:

Kaspersky Internet Security 2019