SSL

WHAT IS SSL?

The Secure Sockets Layer (SSL) (and Transport Layer Security (TLS)) is the most widely deployed security protocol used today. It is essentially a protocol that provides a secure channel between two machines operating over the Internet or an internal network. In today’s Internet focused world, we typically see SSL in use when a web browser needs to securely connect to a web server over the insecure Internet. Technically SSL is a transparent protocol, which requires little interaction from the end user when establishing a secure session. For example, in the case of a browser, users are alerted to the presence of SSL when the browser displays a padlock, or in the case of Extended Validation SSL the address bar displays both a padlock and a green bar. This is the key to the success of SSL – it is incredibly simple experience for end users.

WHAT IS AN SSL certificate?

SSL is a protocol, and in order to use the SSL protocol organizations need a SSL Certificate. A SSL Certificate is a small data file that digitally binds a cryptographic key to your organization’s details, typically:
Your domain name or server name
Your company name and location
In certain cases your contact details
An organization needs to apply for and install the SSL Certificate onto their web server to initiate SSL sessions with browsers. Depending on the type of SSL Certificate applied for, the organization will need to go through differing levels of vetting. Once installed, it is possible to connect to the web site over https://www.domain... as this tells the server to establish a secure connection with the browser. Once a secure connection is established all web traffic between the web server and the web browser will be secure.

WHO NEEDS SSL Certificates?

SSL should be used by any organization wishing to:
Secure online creditcard transactions for online shoppers
Secure online systemlogins, web forms, web mail, control panels or protected areas of web sites
Secure the transfer of files over https and FTP services such as web site owners updating new pages to their web sites
Secure the connection between an email client such as Microsoft Outlook and an email server such as Microsoft Exchange
Secure intranet basedtraffic such as intranets, extranets and database connections