How does SSL Work? - Network Solutions

How SSL Works

SSL (Secure Sockets Layer) is the transaction security protocol used by Web sites to protect online communications. The most common use of SSL is to provide protection for confidential data, such as entering personal details or credit card information into a Web site.

SSL Certificates protect online communications

The SSL Certificate provides two primary functions:

SSL Encryption allows data to be transmitted over computer networks in a secure manner
Identity assurance (validation) allows the business running the site to 'prove' that they are who they claim to be

Once a secure transaction is initiated, (i.e. click the Submit or Buy button to begin a transaction on a Web site), there are four basic steps taken to establish a secure connection:

The browser checks the SSL Certificate to make sure that it is valid and that the site you are connecting to is legitimate.
Data encryption levels are established based on what the browser and Web site server can both use to understand each other.
The browser and server send each other unique codes to use when encrypting the information that will be sent.
The browser and server start talking using the encryption, the Web browser shows the encrypting icon, and the Web pages and information are processed securely.

In addition to data encryption and identity assurance, SSL Certificates give important visual cues to the Web site user that they are in a secure environment:

The SSL Validation Process

Identity assurance is accomplished through the validation process. Network Solutions offers two different validation processes.

Organizationally Validated (OV) Certificates
OV Certificates are issued only after verifying the legitimacy of the applicant's business. This is done by using currently established and accepted vetting processes, like manually checking credentials such as Dunn & Bradstreet number, articles of incorporation, WHOIS, passport, driver's license, etc.
Extended Validation (EV) Certificates
EV Certificates provide a higher level of validation and are available to all business and government entities, but are not available to individuals. The EV process is more rigorous and detailed than for any other Certificate and will require additional steps, which may include obtaining signatures from several people within the applying company, legal verification of the business's existence, etc.

EV Certificates provide additional visual assurance by turning your browser bar green (when using IE7)