SSL is a method of encryption in data communication made by Netscape Communications Corporation. As described in the SSL Protocol Internet Draft (The SSL Protocol, Version 3.0 by ALAN O. FREIER and PAUL C. Kocher, can you open it in http://home.netscape.com/eng/ssl3/ssl-toc.html.
SSL is a layered protocol. In each of the layers, the data consists of long, descriptions and content. SSL retrieve data to be sent, broken into irregular blocks, and then compressed if necessary, apply MAC, encrypted, and the results delivered. At the destination, the data is decrypted, verified, decompress, and reassembled. The results are sent to clients on it. (Free translation).
SSL only encrypts data sent via http. How SSL runs can be described as follows:
At the time of the connection starts, the client and server create and exchange a secret key, which is used to encrypt data to be communicated. Although the session between the client and the server spy others, but the data seem difficult to read because it is encrypted.
SSL support public key cryptography, so the server can perform authentication by a method commonly known as RSA and Digital Signature Standard (DSS).
SSL may verify the integrity of the session is running by using the digest algorithm such as MD5 and SHA. This avoided a session hijacking.
Further articles that I recommend to read to learn more about SSL (all English):
Analysis of the SSL 3.0Protocol, BRUCE DAVID WAGNER and Schneider;
http://www.counterpane.com/ssl.html
Introducing SSL and Certificates, describes the advantages of SSL certification;
http://www.ultranet.com/fhirsch/Papers/cook/ssl_intro.html
Securing Communications on the Intranet and Over the Internet, TAHEL ElGamal, JEFF TREUHAFT, danFRANK CHEN, Netscape Communications Corporation;
http://www.go-digital.net/whitepapers/securecomm.html
The Secure Socket Layer Protocol and Applications, Allan Schiffman, Terisa Systems, Inc.;
http://www.terisa.com:80/presentations/ams/ssl/index.htm
SSL is a layered protocol. In each of the layers, the data consists of long, descriptions and content. SSL retrieve data to be sent, broken into irregular blocks, and then compressed if necessary, apply MAC, encrypted, and the results delivered. At the destination, the data is decrypted, verified, decompress, and reassembled. The results are sent to clients on it. (Free translation).
SSL only encrypts data sent via http. How SSL runs can be described as follows:
At the time of the connection starts, the client and server create and exchange a secret key, which is used to encrypt data to be communicated. Although the session between the client and the server spy others, but the data seem difficult to read because it is encrypted.
SSL support public key cryptography, so the server can perform authentication by a method commonly known as RSA and Digital Signature Standard (DSS).
SSL may verify the integrity of the session is running by using the digest algorithm such as MD5 and SHA. This avoided a session hijacking.
Further articles that I recommend to read to learn more about SSL (all English):
Analysis of the SSL 3.0Protocol, BRUCE DAVID WAGNER and Schneider;
http://www.counterpane.com/ssl.html
Introducing SSL and Certificates, describes the advantages of SSL certification;
http://www.ultranet.com/fhirsch/Papers/cook/ssl_intro.html
Securing Communications on the Intranet and Over the Internet, TAHEL ElGamal, JEFF TREUHAFT, danFRANK CHEN, Netscape Communications Corporation;
http://www.go-digital.net/whitepapers/securecomm.html
The Secure Socket Layer Protocol and Applications, Allan Schiffman, Terisa Systems, Inc.;
http://www.terisa.com:80/presentations/ams/ssl/index.htm
Labels:
Network
Thanks for reading SSL (Secure Socket Layer). Please share...!
0 Komentar untuk "SSL (Secure Socket Layer)"