Live Chat Software

Six Common SSL Security Questions

1. What is SSL?

SSL (secure sockets layer) is an industry standard protocol used to encrypt data transmitted between a browser (customer) and a server (hosting provider for an online business) to prevent deciphering by a third party.

2. How does it work?

The process is quite detailed and technical in nature. The basic components are: A] a greeting, in which the browser and server exchange encryption options and agree on a method for that session, B] authentication, in which the browser verifies that a server’s certificate was issued by a trusted CA (certificate authority), C] transmission, in which data encrypted by the agreed-upon method is sent from browser to server, D] authentication, in which a secret key is used to ensure the transmission’s integrity.

3. Why do I need an SSL certificate for my online business?

Data transmission security = peace of mind for your customers = purchases = profit. Since enough experienced e-shoppers know to look for SSL protection before providing contact or billing information, many online businesses choose to prominently display a clickable seal that customers can use to verify registration with the CA.

4. What is the difference between one brand of SSL certificate and another?

Although the level of encryption security in any given session is limited by the capabilities of the browser, the newer versions of most popular commercial browsers support 128-bit-or-higher data encryption, which is almost mathematically impossible to crack. There is no practical difference in the security provided by any certificates that offer this level of encryption or better. Note, however, that it is the CA’s job, before issuing a certificate, to verify that a business is legitimate and owns the domain name in question; different CAs may have different certification standards. As long as your CA is trusted by most browsers that your customers are likely to use, you can be certain that you are offering industry standard protection. Volusion’s SSL certificates are trusted by more than 99% of the internet community.

5. Why do Volusion SSLs cost so much less than other top brands?

As with any product or service, established companies can take advantage of both merchants and shoppers who are willing to pay more for widely-disseminated names and logos. Have you ever chosen a bottle of Tylenol over a bottle with an unfamiliar label, even though both contained the same ingredients, and the Tylenol cost more than twice as much? Volusion is happy to offer industry standard protection at a fraction of the cost of many top providers. Click on Volusion SSL Certificates to review purchasing options now.

6. How do I know if my SSL certificate is installed and functioning properly?

Change the protocol in your address bar from “http” to “https.” If the bar turns yellow, a yellow lock appears in the bottom right corner of the browser, and the browser does not send you a security warning message, you will know that your certificate is doing its job. All general guidelines have exceptions, of course, but this is a good place to start.

For more detailed information on SSL technology, click to visit the SSL/TLS Wikipedia Entry.

Or try this tutorial, Protocols and Computer Networks, a course compiled by Tel-Aviv University.

-David Yakubik, Volusion Customer Care Specialist

Digg!
Entry Filed under: General Ecommerce, Online Security
April 24th, 2007 at 12:25pm

1 Comment Add your own

  • 1. infomation security  |  August 29th, 2007 at 5:40 pm

    The following 10 considerations must be taken into account before deciding which CA and which type of SSL certificate to purchase? Each point will be discussed in more detail later.
    1. What type of web site application. Low volume, professional or development?
    2. How credible and stable is the CA issuing the SSL certificate?
    3. What browser recognition is required?
    4. Do I require a single root or intermediate SSL certificate?
    5. What certificate strength is required?
    6. Is technical support available from the CA for installation or CSR issues?
    7. Do I need warranty?
    8. What type of validation is required?
    9. How fast do I want my certificate?
    10. What budget do I have for my certificate?
    Lets look at each point in turn.

Leave a Comment

Required

Required, hidden

Some HTML allowed:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

Trackback this post  |  Subscribe to the comments via RSS Feed