SSL Certificate

SSL Certificate
SSL is protocol developed by Netscape for transmitting private documents via the Internet. SSL works by using a private key to encrypt data that's transferred over the SSL connection. Both Netscape Navigator and Internet Explorer support SSL, and many Web sites use the protocol to obtain confidential user information, such as credit card numbers. By convention, URLs that require an SSL connection start with https: instead of http:

Who needs a SSL Certificate?
Any website that stores "sensitive" information like Credit Card numbers, personal information about other people (like names and addresses, Identity Numbers, Passwords etc) or sensitive company information, should only acquire the data from the individual via a secure connection. Not only is a secure connection important to protect you (the website owner) from fraud, but it is essential to protect your customers and staff from fraud as well.

Why is it important?
Firstly, when you enter data (including passwords, credit card numbers) over a non-secure internet connection, the data is transmitted from your PC to the destination server in plain text. The fact that your browser shows a bunch of for the password is simply what it shows you. Your password is still being transmitted as plain text!

So what does it matter?
Any data transmitted over the internet as plain text can be intercepted. It's as simple as that. A person with malicious intentions simply has to listen on the right ports or look in the right places to read exactly what you entered. If that data happened to be your password or your credit card number ... well, you can guess what happens after that.
128-bit encryption - Cryptographers consider 128-bit encryption practically impossible to crack (it would take millions of years with the fastest computers to try all the combinations). With 128-bit encryption you can ensure that your international customer base will be able to exchange information with you using the strongest possible encryption.

How does SSL Work?

• Client requests for secure resource.
  
• Web-server presents its certificate.
  
• Client verifies the certificate
  
• Client generates a Session Key (40, 56 or 128bit).
  
• Client extracts the public key from the web server certificate and encrypts the session key.
  
• Client then sends encrypted key back to the Web-server.
  
• Web- server decrypts the session key and both now have a common key for that session.
  
• Both the web-site and the client can now communicate securely.
  
• When the browser closes the window or server drops the connection the session is terminated.
  
• Next time browser comes back to the same page a new session key is generated.
  

SSL123 certificate

• A thawte SSL123 certificate provides validation that your domain is registered and that you have authorized the purchase of the certificate.
  
• Through SSL encryption, the certificate assures that information is kept private between your web server and your clients' web browsers.
  
• The certificate inspires trust in those who are considering communicating/transacting with you.
  
• SSL Web Server certificate
  

SSL Web Server certificate

• Confirms that you are who you say you are in a virtual world.
  
• Encrypts information sent to and from your web server.
  
• Protects information from being tampered with.
  
• The domain for which the certificate was issued. This allows customers to check that the certificate was issued for your domain (URL).
  
• The legal owner of the certificate. This acts as further reassurance, since customers are able to see whom they are doing business with.
  
• The physical location of the owner. Once again this reassures customers that they are dealing with an actual entity.
  
• The validity dates of the certificate. This is extremely important, since it shows users that your SSL Web Server certificate is current.
  

SGC SuperCert

• thawte's new SGC SuperCert now automatically steps up to 128-bit encryption for certain end-users with the Windows 2000 operating system who, in the past, would not receive 128-bit encryption irrespective of the version of Internet Explorer used. The systems affected are those that shipped prior to about March of 2001 and did not subsequently have Microsoft's High Encryption pack or Service Pack 2 installed. thawte's SGC SuperCert ensures that all these site visitors enjoy the protection of the strongest SSL encryption available.
  
  An SGC SuperCert from thawte will allow you to extend 128-bit encryption to your customers, even if they use browsers (IE 4.X or Netscape 4.06 and later) limited to 40-bit or 56-bit encryption capabilities.