1. How to Check if a site's connection is secure ?

2. Have you seen these symbols

3. Let’s see an example https://www.onlinesbi.com

4. What is SSL
SSL (Secure Sockets Layer) is the standard technology to ensure security.
Main aim of SSL is to establish an encrypted connection between a web server and a browser.
To be able to create an SSL connection a web server requires an SSL Certificate.
To activate SSL on our web server, we need to complete a number of questions to explain about the identity of our website and our company.
After that our web server creates two cryptographic keys - a Private Key and a Public Key.

5. Public key is not a secret key.
Public key is placed into a Certificate Signing Request (CSR).
CSR is a data file containing our information & we need to submit it.
During the SSL Certificate application process, the Certification Authority will validate your details and issue an SSL Certificate containing your details and allowing you to use SSL.

6. So what actually is this certificate ?
When we access a site that uses HTTPS (connection security), the server of the website uses a certificate to prove the identity of website to web browsers.
To help the user to stay safe on the web, web browsers requires each websites to use certificates from trusted organizations.

7. Does a normal user need to know about SSL ?
Customers won’t be able to know the complexities of SSL protocol
Instead of that, their browsers provide them a key indicator so as to know that they are currently protected by an SSL encrypted session.
Clicking on the lock icon in the lower right hand corner , displays our SSL Certificate and the information about it.
All SSL Certificates are issued to either companies or legally accountable individuals.

8. Contents in an SSL certificate
Your domain name
Your company name
Your address
Your city, Your state and Your country
Certificate expiration date and information of the Certification Authority is mainly responsible for the issuance of the Certificate.

9. SSL certificate from Browsers point of view
The site's SSL Certificate is retrieved whenever a browser is connected to a secure site.
Check whether it has expired
Check whether it has been issued by a Certification Authority that our browser trusts
Check whether it is being used by the website for which it has been issued.
If it fails on any one of these checks the browser will display a warning to the end user letting them know that the site is not secured by SSL

10. Questions
Write notes on SSL and how SSL provides security ?

11. Discuss in groups : Most common security threats Form a group
choose your groups name
select a group leader

12. Visit the following Links