When an Internet user visits a secure web site, an SSL certificate provides identification information about the web server and establishes an encrypted connection. This process happens in a fraction of a second.
What Happens between the Web Browser and Server
A browser attempts to connect to a web site secured with SSL. The browser requests that the web server identify itself.
The server sends the browser a copy of its SSL certificate.
The browser checks whether it trusts the SSL certificate. If so, it sends a message to the server.
The server sends back a digitally signed acknowledgement to start an SSL encrypted session.
Encrypted data is shared between the browser and the server.
SSL Fundamentals
There are 3 essential elements at work in the process described above: a protocol for communications (SSL), credentials for establishing identity (the SSL certificate), and a third party that vouches for the credentials (the certificate authority).
Computers use protocols to allow different systems to work together. Web servers and web browsers rely on the Secure Sockets Layer (SSL) protocol to enable encrypted communications. The browser’s request that the server identify itself is a function of the SSL protocol.
Credentials for establishing identity are common to our everyday lives: a driver’s license, a passport, a company badge. An SSL certificate is a type of digital certificate that serves as a credential in the online world. Each SSL certificate uniquely identifies a specific domain (such as thawte.com) and a web server.
Our trust of a credential depends on our confidence in the organization that issued it. Certificate authorities have a variety of methods to verify information provided by individuals or organizations. Established certificate authorities, such as Thawte, are well known and trusted by browser vendors. Browsers extend that trust to digital certificates that are verified by the certificate authority.
If you need to secure your web site, it is quick and easy to request an SSL certificate and install it.
Generate a Certificate Signing Request (CSR) for the web server you plan to secure. If you do not manage your own web server, contact your web host or Internet service provider to request a CSR.
At the end of the SSL certificate’s validity period (1-5 years, depending on the certificate type and your selection), you have the option to renew your SSL certificate. You may need to provide additional information for authentication or generate a new CSR.
Why choose Thawte?
Thawte is trusted by millions of people worldwide. When we issue an SSL certificate, we know that our name will appear next to yours as the trusted third party who verified it. We take that trust seriously and lead the industry with rigorous authentication methods and a global infrastructure to support real-time certificate look-ups.
SSL initiates an authentication process called a handshake between two communicating devices to ensure that both devices are really who they claim to be. SSL also digitally signs data in order to provide data integrity, verifying that the data is not tampered with before reaching its intended recipient.
SSL uses digital signatures and digital certificates for establishing a trusted relationship between a sender and a receiver of information sent over a network connection. A cipher suite is a set of ciphers (encryption algorithms) used for encrypting sensitive information.
The Secure Sockets Layer (SSL) protocol was developed by Netscape Communications Corporation. SSL ensures the data that is transferred between a client and a server remains private. This protocol enables the client to authenticate the identity of the server.
SSL is standard technology for securing an internet connection by encrypting data sent between a website and a browser (or between two servers). It prevents hackers from seeing or stealing any information transferred, including personal or financial data.
One example of sensitive data protected by SSL is financial information, such as credit card numbers. Other examples include: User login credentials. Personally identifiable information (PII).
The browser sends back a symmetric session key and the server decrypts the symmetric session key using its private key. The server then sends back an acknowledgement encrypted with the session key to start the encrypted session.
For this reason, TLS uses asymmetric cryptography for securely generating and exchanging a session key. The session key is then used for encrypting the data transmitted by one party, and for decrypting the data received at the other end. Once the session is over, the session key is discarded.
The SSL kicks in immediately when installed. Let's encrypt SSL installations need a few minutes. The Premium SSL certificates are installed within a few hours in most cases.
SSL provides the maximum level of security for users. Organizations such as Google encourage the use of HTTPS protocol to ensure the safety of its users.
While it's unlikely that your SSL certificate will be hacked, there are other ways an SSL can be compromised. Ensure your SSL has a fighting chance by doing the following: Protect your private key: Hackers won't even need to guess anything by brute force if they somehow get their hands on your private key.
SSL establishes a secure connection between your browser and the website or server that you visit. Third parties cannot hack this connection to see what is being shared.
Really Simple SSL is a one click plugin that automatically detects your settings and configures your WordPress website to run over https. You must have an SSL security certificate installed on the server for the site, but otherwise it takes care of all of the rest for you.
Introduction: My name is Rev. Leonie Wyman, I am a colorful, tasty, splendid, fair, witty, gorgeous, splendid person who loves writing and wants to share my knowledge and understanding with you.
We notice you're using an ad blocker
Without advertising income, we can't keep making this site awesome for you.
Email
