Presentation on theme: "Lori Fitterling LI843 SSL Secured Sockets Layer. What is Secure Sockets Layer (SSL)? It is protection of data transferred over the Internet using encryption."— Presentation transcript:
Lori Fitterling LI843 SSL Secured Sockets Layer
What is Secure Sockets Layer (SSL)? It is protection of data transferred over the Internet using encryption and enabled by a server's SSL Certificate. An SSL Certificate contains a public key and a private key. A public key is used to encrypt information and a private key is used to decipher it.
When a browser points to a secured domain, an SSL handshake authenticates the server and the client and establishes an encryption method and a unique session key. They can begin a secure session that protects message privacy and message integrity.
SSL Does These Two Things Authenticates the server and the client using public- key signatures. Provides an encrypted connection for the client and server to exchange messages.
Developed by Netscape in 1994 for transmitting private documents Has become the standard for e-commerce transaction security SSL encrypts data, like credit cards numbers and personal information Uses either 40-bit or 128-bit encryption I found that 40-bit encryption has been hacked SSL & E-Commerce
Reasons Why You Would Use SSL If you have an online store or accept online orders and credit cards If you offer a login or sign in on your site If you process sensitive data such as address, birth date, license, or ID numbers If you need to comply with privacy and security requirements
Buy one from vendor – Can run about $ per year. Or “self-sign” your own certificate using proprietary software. Self-Signed certificates will trigger a warning window in most browser configurations that will indicate that the certificate was not recognized. How to get an SSL Certificate
Example of a SSL security alert
Libraries Using SSL White Library -- My Library AccountMy Library Account To comply with license agreements that only allow access to authenticated users -- databases and electronic journals
Websites About SSL Media Lab: SSL.com Knowledgebase: WiseGeek: Ourshop.com: