SSL Certificate
We will begin our explanation of SSL certificates with a definition. We will then explain what an SSL certificate can bring to your website.
Definition of SSL certificate
An SSL certificate (SSL standing for "secure socket layer") is a file installed on an Internet server. This certificates sole function is to provide security for the transfer of some (or all) data on the server.
The security is provided by a variable level of encryption, although in general, Internet the level of encryption is 128 bits for Internet sites. This ensures a relatively high level of confidentiality and a certificate that is difficult to bypass.
This TLS certificate the certificates official name since the Internet Engineering Task Force purchased the patent does not guarantee protection against the interception of encrypted data, but does provide effective protection of such data.
Origin of the certificate
The SSL certificate was invented in 1994 by Netscape, in collaboration with other companies such as MasterCard and the Bank of America.
In 2001, the IETF purchased the patent from Netscape and changed its name to "Transport Layer Security" (TLS). Following this transfer, the IETF created standard RFC 2246.
How the SSL certificate works
Principle
The certificate is used to meet four security objectives:
- the authentication of the Internet server transmitting the data this is required to ensure that the correct site is issuing the certificate;
- the confidentiality of data transfer and exchange;
- the integrity of exchanged data the certificate must be sufficiently "powerful" to prevent any third party from altering the data transmitted;
- optional: client authentication to ensure that the Internet user making the order has transmitted the data properly.
The SSL certificate works under a client-server format:
- Step one: the client connects to the server via SSL, requests authentication from the server. At the same time, the client sends the encryption systems used by his browser (in decreasing order of importance);
- After receiving the request, the server sends the public key and the name of the highest encryption system on the list with which it is compatible;
- After verifying the certificate, the client creates a random private key, encrypts it with the public key, and sends back a session key;
- Final step: using its private key, the server decrypts the session key, which then becomes a communal key. The two parties are now able to "converse" using this session key, guaranteeing the integrity of the data exchanged.
An encrypted web page can be recognised by several elements. The first of these is an icon on your browsers status bar.
The second indicator that a page is encrypted is the appearance of "https" in your browsers address bar, which shows that the address is secure.
Installation of SSL certificate with Namebay
There are four steps in the process of obtaining an SSL certificate from Namebay:
- first, generate a CSR, which is unique to each piece of software and/or version managing the web server. If you use Apache, for example, you will need a CSR for Apache; if you use IIS, you will need a key for IIS.
- 2nd step : complete the on-line certificate order form.
- we will process your request
- After receiving an email from us, copy and install your SSL certificate.
Technical information about the SSL protocol
The following constitutes basic technical information, allowing you to understand more about how the TLS/SSL certificate works.
The SSL protocol is implemented in the TCP/IP stack session layer, ensuring Internet data transfer.
The data link layer is the intermediary layer between the transport layer and the application layer (which contains the HTTP protocol). The HTTPS protocol is therefore the HTTP protocol on SSL.
The purpose of the SSL certificate
The SSL certificate is indispensable for on-line businesses. It is a strong indication of "respectability" and security. Even if the website is bright and attractive, an internet user may be forced to cancel his purchase if there is no SSL certificate installed to prove that the transaction is secure.
With an SSL certificate, any internet user can be assured that all the sensitive information he is transmitting cannot be used by a third party.
Europe is one of the largest market areas for Internet services. One in four domain names is registered in Europe. Failure to include an SSL certificate in your e-commerce solution constitutes a serious hindrance to your competitiveness.
Glossary
CSR: Stands for "Certificate Signing Request"
SSL: This acronym stands for "Secure Socket Layer".
HTTPS is the acronym for "Hypertext Transfer Protocol Secured".
TCP/IP: Internet protocol suite, comprising a protocol stack used for the Internet.
TCP means "Transmission Control Protocol". IP means "Internet Protocol".