The 411 on SSL Certificates
Friday, June 17th, 2011What is Secure Web Hosting and SSL and what are their benefits:
With people having the ability to read the information of other folk, the Internet is not as safe as it once was. Hackers are people who are able to uncover the information that people pass on websites. It is also possible for them to get hold of confidential data like credit card details or passwords. Many hackers also have the ability to offer their own version of another person’s website and this can be hosted on their own server. This is done to fool customers who may be unaware of these issues. The majority of hackers act to obtain information that is of value and interest about people. One way of combating these hackers is by using the Secure Sockets Layer or SSL.
The Secure Sockets Layer or SSL is a world wide standard security technology, which is developed by Netscape in 1994. It facilitates to establish an encrypted link between a browser and a web server. This link makes it certain that all the data, which passed between the web server and browser remains secure and private. It is recognized by a secured padlock that appears in the browser of the consumers. This protocol is used by a huge number of e-Business providers in order to shield their customer’s important information as well as to ensure that the online transactions remain confidential.
The Certificate for SSL:
If a web server wants to use the Secure Sockets Layer protocol, it will require an SSL Certificates provided by the Certification Authorities (CA). You will have to complete several questions about the identity of your company and website, while you choose to trigger SSL on your web server. The web server then constructs two cryptographic keys i.e. a Public Key and a Private Key. The Public Key is not a furtive. It is placed in a Certificate Signing Request or CSR, which is a data file that contains your details. You then require to submit the CSR. The Certification Authority validates all the details that you have provided in the CSR throughout the SSL Certificate application process. It further allocates an SSL Certificate that contains all your details and thus allows you to use SSL. The issued SSL Certificate is matched to the Private Key by your web server. This will enable your web server to establish an encrypted link between your website and the customer’s web browser.
However, all these complex procedures of the SSL protocol remain undetectable to the customers. What their browser provides to them is a key indicator that helps to let them know they are well protected by an SSL encrypted session. There is a lock icon in the lower right hand corner of your customer’s browser by clicking which, your SSL Certificate and all other details are displayed. Generally, all these SSL Certificates are allotted to registered companies and to legally accountable individuals.
The usual information contained within an SSL Certificate will usually provide country, state, city, and address, name of the company and the domain name of the site. The expiration date of the certificate will also be included as will further information about the Certification Authority that holds the responsibility for issuing the certificates. If the browser of the visitor connects to the secured site, the SSL certificate will be unable to retrieve the SSL certificate from the site. A quick search in the veracity of the sites SSL certificate will be undertaken and that it has been allocated to the website claiming it is for. Another check will also be undertaken on the date of expiry for the certificate. If for any reason the certificate does not pass all the questions asked of it, there will be a warning displayed to the final user.
There is no doubt that the golden padlock has been accepted by many customers. It is viewed as a symbol of trust for the site. There is little doubt that the e-Business company can use this as an ideal opportunity to encourage trust and additional expenditure from customers and also turn visitors into customers. There are numerous shopping carts or sites that take information from customers and a large percentage utilize the SLL certificates. Nevertheless, users should recall that if confidential information is sent by email, this information is not naturally secured.
The new functions:
The SSL v3 has been recently introduced and is an improved version of upon SSL v2. It has been added with SHA-1 based ciphers and provides support for certificate authentication. There were certain flaws in the SSL v2, where indistinguishable cryptographic keys were used for encryption as well as for message authentication. Moreover, the former version had no protection for the handshake, which implies a “Man-in-the-middle downgrade attack” could even go unnoticed.
Another improvement has come with the Transport Layer Security taking over from the Secure Sockets Layer. The TSL has been clearly influenced by SSL and has taken many uses and styles that are synonymous with Microsoft and Netscape browsers in addition to a great number of products utilizing Web server capabilities. Today, it is common for SSL to utilize public and private key encryption that is able to provide a digital certificate.
SSL Certificate, do you need one:
* If privacy of others and yourself as well as a need to have trust in your site is important, then the purchase of the SSL certificate is vital.
There is a need for offices that have intranet usage where information is being distributed to obtain an SSL certificate.
If you have a need to process information such as telephone numbers, ID numbers, license numbers, date of births or addresses then an SSL certificate can aid this process.
* An SSL Certificate helps you to process several sensitive data including date of birth, ID numbers, address, telephone number or license number safely.
* If anyone in your firm utilizes an extranet, the SSL certificate is an additional layer of security from those wanting to hack your site.
Some helpful information about purchasing SSL Certificates:
* The Certificate Authority market is quite diverse, but it is better to purchase an SSL Certificate that meets your requirements as well as budget. You can find a number of Secure Sockets Layer Certificate in different price range. The Open Directory Project identifies 22 third parties and offers over 20 root certificates that are included into Firefox and Internet Explorer. However, due to its price, it is dominated only by a few major firms.
* A survey undertaken in June of 2005 by Netcraft set out to find the names of the biggest providers of SSL certificates. This was backed up in 2007 when Security Space attempted a similar search. The top ranker was found to be Equifax, through its Geotrust arm (www.equifax.com), the next was VeriSign plus which utilized their Thawte subsidiary (www.verisign.com) as well as GoDaddy/Starfield (www.godaddy.com),, Comodo (www.comodo.com) and Digicert (www.digicert.com).
It can be seen that depending on what form of measurement is used, these six providers cover 95% of the market in this industry. The largest market share is held by Verisign with about 72% market share with Comodo coming next with around 18%. Geotrust has around 3.4% market share and GoDaddy and Entrust contain about 1% and 2.5% of the market share. The remaining providers comprise about 3 or 4% on average of the market.
About author: Gregory Trune is a professional writer in the web hosting industry. Visit WebHostingMadness.com to follow his search for the best hosting companies each month.
