SSL

SSL (Secure Sockets Layer) is a security protocol that enables the encrypted data transmission between a server and a client, usually a website and a browser.

This technology ensures that the sensitive data, such as passwords, credit card details and personal data, are transmitted securely over the internet, preventing them from being intercepted by malicious third parties.

Although it is currently used TLS (Transport Layer Security) Although it is an enhanced version of SSL, the term «SSL» is still widely used to refer to this type of security.

What is an SSL certificate and what is it used for?

A SSL certificate It is a data file that links a cryptographic key to the details of an organisation or individual.

When installed on a server, the certificate enable the HTTPS protocol and secures the connection between the server and the web browser. This builds trust among users, who can tell that the site is secure when they see a padlock in the browser’s address bar.

An SSL certificate is essential for securing online transactions and ensuring the confidentiality y authenticity of communication.

The main benefits of having an SSL certificate are:

• Data encryption: The data sent between the server and the client is protected using advanced encryption techniques, preventing third parties from accessing it.
• Authentication: It ensures that the website is genuine and not a fake set up to steal information.
• User confidence: Websites with SSL display security indicators, such as the padlock and the «https» prefix, which help to build trust among visitors.

How do SSL certificates work?

When a browser attempts to connect to an SSL-secured website, a process known as handshake (handshake), which involves the following steps:

1. The browser requests the server’s identity.
2. The server sends a copy of its SSL certificate, which includes their public key.
3. The browser checks the SSL certificate to ensure that it is genuine and trustworthy.
4. If the certificate is valid, the browser generates a session key, encrypts it using the server’s public key, and sends it.
5. The server decrypts the session key using its private key.
6. From this point onwards, all communication between the browser and the server is encrypted using that session key.

Types of SSL certificates

There are several types of SSL certificates, which vary according to the level of validation and the number of domains they can protect:

• Domain Validation (DV) Certificates: They verify that the applicant is the owner of the domain. These are the most basic and quickest to obtain.
• Organisation Validation (OV) Certificates: They require validation of the organisation behind the domain, which provides an additional level of trust.
• Extended Validation (EV) Certificates: These are the most secure and reliable. The browser’s address bar displays the organisation’s name alongside the padlock, guaranteeing maximum authenticity.
• Wildcard certificates: They protect a primary domain and all its subdomains.
• Multi-Domain (SAN) Certificates: They allow you to secure several different domains with a single certificate.

How do I get an SSL certificate?

To obtain an SSL certificate, you need to follow these steps:

1. Select a supplier SSL certificate providers, such as Let’s Encrypt, Comodo or DigiCert.
2. Generate a certificate signing request (CSR) from the server on which the certificate is to be installed.
3. The supplier will verify the applicant’s identity (depending on the type of certificate) and will issue the certificate.
4. Install the certificate on the web server.
5. Configure the server to enforce the use of HTTPS, by redirecting all HTTP traffic to the secure protocol.

You may be interested in our specialised training in data processing...

• Course in Data Analysis and Visualisation with Looker
• Advanced Course in Data Science