 |
Further
Reading ...
|
|
eBay Listing Service : Make Managing Your Auctions Easy
Do you want to have a lot of auctions going but don’t have time to keep track of them all? Trust me, you’re not alone. With more and more people making significant portions - if not all - of their income from their eBay auction websites the need has...
Search engine marketing through content
If you currently have a website that is only a few pages long, you may fear that your site may not rank highly in search engines. But, this does not have to be the case. What does matter is the content on those few pages. Knowing what content to...
Removing Some Spyware Is Like Treating Cancer
Spyware - Removing Cancer From Your System
Do you know the difference between spyware prevention and spyware removal? These functions are not the same. Not all spyware is the same. Most work like a malignant cancer, spreading into everything,...
11 Ways To Indirectly Get To The Top Of Search Engines
11 Ways To Indirectly Get To The Top Of Search Engines There are millions of web sites trying to get listed in the top 20 spots of the major search engines. That amounts to a lot of competition! I say if you can't get listed at the top, indirectly...
|
|
|
Does SSL protect you, or is it a condom that is open at both ends?
|
 |
Written By:
ArticSoft
|
|
|
For the last five or so years, SSL has been paraded as the technology that secures the Internet. All you have to do is look and see the padlock on the bottom of the screen and you can be sure it’s safe.
Is it true?
SSL is a technology for providing a secure connection between two places. It provides secure links, or pipes between wherever it starts and wherever it stops.
What it does not do is actually secure any of the data that passes through the pipe, or really know where either end of the pipe actually is. What you can be sure of is that anything put into one end of the pipe is going to come out wherever the other end is.
But surely the data is fully protected? Yes, whilst the data is in the pipe it is protected. Now, assuming – and unfortunately that’s what we have to do – that you know for sure where each end of the pipe is, and you are sure that each end is very secure, and you know for certain who is at each end, then you’re OK. If any of those is not true then you do have a problem.
My data is SSL protected between the server, and me so why should I worry? Well no one at the server end really knows whom the data is from because they don’t know what your identity is. They assume that data arriving through the pipe is right, and that your identity can be - continued below ...
|
|
|
continued ...
presumed from the data, not the other way around. Unfortunately there are hacker attacks that divert your link through their own site, where they can pretend to each end that they are the other entity without either end being the wiser.
(This is called a man-in-the-middle attack using web site spoofing.)
Once your information gets to the server it stops being protected and anyone can get to it, at least judging from the fact that hackers target web sites first because that’s where they can guarantee to find large quantities of names, addresses, credit card numbers and so on. (Actually, SSL places such a heavy load on computers that they now have other machines doing just the SSL encryption so your data is potentially exposed even before it has a chance to get to the web server, but that’s not the point.)
So there’s the problem. SSL provides strong protection, but not actually to the data, just the link. You might say it was a condom that protects the pipe.
About the Author
ArticSoft (www.articsoft.com) have over 30 years experience in the field of computer security, and 15 years experience of securing information on personal computers and messaging systems. Our CEO Steve Mathews, is one of the authors of BS7799 (now ISO/IEC 17799) and is well recognized in the security industry.
|
|
|
|
 |
|
|
| _Additional Resources ... |
|
High Speed Internet Providers - How Do You Choose?
If you work at home using the internet or are frequently on the internet checking out websites, then you will want to look into service from a high speed internet provider. There are several ways to connect to the internet in order that you receive...
Growing Trends Of The Mobile Phone Industry
The ever-changing mobile communications industry is again transforming consumer perception of telephony on-the-move. We’ve come a long way since the 80’s "brick like" model that gave us the freedom to move away from dingy payphones. In fact, mobile...
Computer E-Waste Recycling Now Fueled By Lack Of Australian Legislation
Motivated by the lack of Australian government legislation and limited options available concerning the disposal of computer e-waste, IT Recyclers has initiated a much needed computer recycling service aimed primarily at Sydney business who wish...
|
|
|
|
|
|
|
|
|
|
