SSL and certificates
Increasingly IT-security plays a larger role, especially in handling sensitive data. In any case user name and passwords are parts of it. To protect these SSL - Secure Socket Layer goes into action when transmitting files between WWW-Browser and WWW-Server.
What is SSL and how does it work?
SSL is a transmission protocol with hybrid encryption, i.e. to encrypt transmitted files a symmetric procedure (both sides, Browser and server use the same key) is used. An asymmetric procedure is used to exchange the necessary key.
WWW-Browser
|
HTTPS-request |
WWW-Server |
examination |
Server-certificate |
|
session key |
asymmetric encryption |
WWW-Server |
SSL-connection
|