Secure Sockets Layer
SSL is
an acronym for Secure Sockets Layer, an encryption technology that was created
by Netscape. SSL creates an encrypted connection between web servers and web
browsers allowing for private information to be transmitted without the
problems of eavesdropping, data tampering, or message forgery. The protocol
uses a third party, a Certificate Authority (CA), to identify one end or both
end of the transactions. SSL uses a cryptographic system that uses two keys to
encrypt data a public key known to everyone and a private or secret key known
only to the recipient of the message. SSL is supported as part of the
Microsoft, Netscape browser, and many web server products. Many Web sites use the
protocol to obtain confidential user information, such as credit card numbers.
By convention, URLs that require an SSL connection start with https: instead of
http. Typically an SSL Certificate will contain your domain name, your company
name, your address, your city, your state and your country. It will also
contain the expiration date of the Certificate and details of the Certification
Authority responsible for the issuance of the Certificate. When a browser
connects to a secure site it will retrieve the site's SSL Certificate and check
that it has not expired, it has been issued by a Certification Authority the
browser trusts, and that it is being used by the website for which it has been
issued. If it fails on any one of these checks the browser will display a
warning to the end user letting them know that the site is not secured by SSL.
No comments:
Post a Comment