When should SSL be used and what can it secure? Print

There are two main online security problems that SSL certificates help solve:

• Authentication - proving a company's (or server's) identity online and in so doing create a sense of trust and confidence in using a Web site.
• Encryption - offering protection for the data submitted to a Web site (or between servers) so that in the event of interception, it will be unintelligible without the unique key used for decryption.

Solving these security problems allows online business to protect against the following scenarios:

• Spoofing - The low cost of Web site design and ease with which existing pages can be copied makes it all too easy to create illegitimate sites that appear to be published by established organizations. In fact, con artists have illegally obtained credit card numbers by setting up professional-looking storefronts that mimic legitimate businesses.
• Unauthorized Disclosure - when information is transmitted "in the clear", making it possible for hackers to intercept the transmissions and obtain sensitive information from customers.
• Data alteration - the content of a transaction can be intercepted and altered en route, either maliciously or accidentally. User names, credit card, and social security numbers as well as currency amounts; indeed any information sent "in the clear" is all vulnerable to alteration.