Step 2: SSL validation vs. EV SSL validation

History and Overview of SSL

In 1994, Netscape developed The Secure Sockets Layer Protocol (SSL), as an answer to the budding security issues with web browsing, e-mail, Internet faxing and instant messaging. The first version wasn't released as it contained so many bugs, as did version two. Version three was released in 1996. SSL works with two protocols:

• Record Protocol: controls the flow of the data between the two endpoints of an SSL session, with the client and server usually serving as the two endpoints.
  
  
• Handshake Protocol: This protocol actually authenticates one or both endpoints of the SSL session and it initiates a unique set of keys to encrypt and decrypt data for that SSL session.

The SSL protocol validates authentication at both endpoints-server and client. SSL encrypts the data but determines whether or not each party (server and client) has the expected authentication.

Obtaining a secure certificate through a validated Certificate Authority (CA) helps to ensure that both parties are a trusted source, even though a certificate can be created independently.

                    

Print this page