SSL/TLS & HTTPS

(Secure Sockets Layer / Transport Layer Security)

• Establish an encrypted link over a network
• Exchange of public & private keys to secure the exchange
  • Server sends SSL certificate + public key
  • Client checks the certificate & answers with an encrypted session key
  • Client & server exchange messages encrypted with the keys to authenticate
• SSL certificate has been certified by a renowned authority
• HTTPS: HTTP secured with SSL/TLS