What is SSL?

The SSL protocol provides authentication and privacy of information between two computers on the Internet by using cryptography. Usually only the server is authenticated and its identity is ensured while the client remains unauthenticated; mutual authentication requires a deployment of public key infrastructure (PKI) for customers. The protocols allow client / server applications to communicate in a manner designed to prevent listening (eavesdropping), falsification of the sender (phishing), disrupt the integrity of the message.

SSL involves three basic phases:

Peer negotiation algorithm to be used in communication.
Exchange of public keys and digital certificate-based authentication.
Encrypt the symmetric cipher-based traffic.

During the first phase, the client and server negotiate which cryptographic algorithms will be used. Current implementations provide the following options:

For public key cryptography: RSA, Diffie-Hellman, DSA (Digital Signature Algorithm) or Fortezza;
For symmetric encryption: RC2, RC4, IDEA (International Data Encryption Algorithm), DES (Data Encryption Standard), Triple DES or AES (Advanced Encryption Standard);
Hash functions: MD5 or SHA family.

SSL runs in a layer between application protocols such as HTTP, SMTP, NNTP and TCP transport protocol, part of the family of TCP / IP. Although it can add security to any protocol that uses reliable connections (such as TCP) is used in most cases with HTTP to form HTTPS. HTTPS is used to secure World Wide Web pages for e-commerce applications, using public key certificates to verify the identity of endpoints.

Although an increasing number of clients and servers can provide SSL natively, many still do not. In these cases, a user might want to use a separate application like Stunnel SSL to provide encryption. However, the Internet Engineering Task Force recommended in 1997 that application protocols offer a way to upgrade to TLS from a connection without encryption (plaintext), instead of using a separate port for encrypted communications - this would avoid the use wrappers (wrappers) as Stunnel.
SSL can also be used for a complete network and tunneled to create a virtual private network (VPN), such as OpenVPN.



What is HTTPS?

The letters HTTPS Secure Hypertext Transfer Protocol-Protocol Secure HyperText Transfer, is a network protocol based on HTTP protocol, for secure data transfer hypertext. It is the secure version of HTTP.
Currently used by banks, online stores, and any shipping service that requires personal data or passwords.


Security SSL environment


Process transactions in a purchase over the Internet or communicate confidential data security requires a level of 100% reliable. The protocols that make it to navigate safely Certificates of Authenticity are the universal system that requires SSL (Secure Socked Layer).
A Certificate Authority (CA) is the company that issues certificates as Business Partner of Soft Enterprise BPM is Global Sign.

The rate of people buying online is growing year on year and growth over the past 2 years has been spectacular. This reality is due to the reliability offered by the e-commerce sites with SSL.

Security in an environment of electronic commerce requires some essential caracteríticas:


Privacy

Transactions can not be viewed by anyone else.


Integrity

The data or transactions such as credit card numbers or orders will not be altered.

  
Non Repudiation

The SSL certificate for a website that enables users that generate the transaction is responsible for it. The system allows the user can not deny the transfer.


Authentication

The SSL certificate is a guarantee that participating in the transaction are fair and valid.


Facility

The parties involved in the transaction have no difficulty in making the transaction in the SSL layer.


SSL Server Certificate

Issued

Common Name (CN) www.softempresarial.com
Organization (O) SOFT EMPRESARIAL BPM®
Organizational Unit (OU) Domain Control Validated
Serial Number: 01:00:00:00:00:01:25:FA:46:26:F5

Issued by

Common name (cn) GlobalSign Domain Validation CA
Organization (O) GlobalSign nv-sa
Organizational Unit (OU) Domain Validation CA

Validity

Issued 01/01/2010
Expires on 01/01/2020

Fingerprints

99:2 A SHA1 Fingerprint: 46:B4:29:B5:B4:95:EA:A4:7F:7E:BC:2B:11:41:CA:E2:2F:4C
MD5 Fingerprint D0:2E:5F:BA:68:6A:87:CA:C2:0E:DF:DD:91:68:D7:DE