What is SSL?

SSL (Secure Sockets Layer) secures communication between computers. Usually, this is between a web server and a web browser, particularly on shopping and bank websites.

SSL Certificate

When you visit an SSL-secured website, a padlock appears on your web browser. This shows that any information sent between your browser and the page is encrypted.

SSL encryption means that you can safely send sensitive information to websites without the risk that it could be intercepted.

However, even if a page is SSL encrypted, you should be cautious when choosing what information to share. Your primary security concern should be who you’re intentionally sending information to, as well as who might intercept it.

Your web browser software checks the certificate of an SSL page, when you visit a site and, if it is from a trusted certification authority, it will allow you to browse as normal. If your browser doesn’t recognise the certificate provider, it will warn you. This doesn’t necessarily mean that the website is untrustworthy but you should exercise extra caution.

SSL certificates are issued by trusted certification authorities. These organisations make checks to ensure that the website owner is legitimate. SSL certificates link a website to a server, and will not allow more than one certificate per server IP address.

How do I get an SSL?

The basic procedure for requesting a publicly trusted SSL website certificate is as follows:

  • The person or organisation requesting the certificate generates a pair of public and private keys, preferably on the server to be protected.
  • The public key, along with the domain name(s) to be protected and (for OV and EV certificates) organisational information about the company requesting the certificate, is used to generate a certificate signing request (CSR).
  • The CSR is sent to a publicly trusted CA (such as SSL.com). The CA validates the information in the CSR and generates a signed certificate that can be installed on the requester’s web server.

If you would like your site to have its own SSL certificate and an https:// address please contact Brent for further information.