SSL provides a security "handshake" in which client and server computers exchange a short series of messages. In these messages, the client and server agree on the level of security to use for exchanging digital certificates and other activities. Each computer identifies the other. After identification, SSL encrypts and decrypts the information flowing between the two computers. This means that the information in both the HTTP request and any HTTP response is encrypted, and HTTP access permission Says no to plagiarism. Get a tailor-made essay on "Why Violent Video Games Shouldn't Be Banned"? Get an Original Essay In short, all communications between SSL-enabled clients and servers are encrypted. When SSL encrypts everything that flows between client and server, an eavesdropper receives only gibberish. How SSL works with an exchange between a browser (SSL client) and a Web server (SSL server): When a client browser sends a request message to a secure website on the server, the server sends a hello request to the browser (client ). The browser responds with a client hello. Next, the browser asks the server for a digital certificate as proof of identity. In response, the server sends the browser a certificate signed by a recognized certificate authority. The browser checks the serial number and certificate fingerprint on the server certificate against the CA's public key stored in the browser. Once the CA's public key is verified, approval is verified. This action authenticates the Web server. It sends its client certificate an encrypted private session key for use. When the server receives this information, it starts the session established as secure, the request messages coming from the browser are accepted by the Web server, which sends the necessary responses. In this secure session, the browser user can make purchases, pay bills, or trade securities without worrying about security threats to the information passing between the two computers. Please note: this is just an example. Get a custom paper from our expert writers now. Get a Custom Essay From this point on, public key cryptography will no longer be used. Instead, only private key encryption is used. When the session ends, the session key is deleted. It is important to secure your website with SSL to keep your data safe and ensure your customers can trust the website
tags