Security

Ask something
Discussion Locked

How does SSL work?

0 helpful
4 replies

by thinknologist

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Can somebody explain to me how SSL works?

4 replies

by borco

I am not sure if you want read this, if not, please be more precise what you want to know...

How does SSL work? Simple :-)

An SSL session proceeds as follows:

The client connects to an SSL server.
The SSL server sends a request to initiate the secure session.
The client returns a response indicating whether it is SSL-enabled.
The client and server communicate security information to each other. This is the "handshaking" stage.
The client specifies the session ID, encryption algorithms (ciphers) and compression methods it supports.
The server selects algorithms that it supports from those specified by the client. If required, the server and client then exchange certificates.
The server specifies a session key that is appropriate for the encryption algorithm chosen at the handshaking stage.
The server and client can now communicate securely.
The SSL session usually involves the use of two separate protocols:

by micky martins

1-Web Server gets a Secure Socket Layer Certificate with 128 bit encryption public key and private key.
2-Client computer request a html page https://domain.com/payments.asp
3-Web server sends his public key to the client
4-client creates a session key and sends back to the server and encryption level negotiation start 56bit? 128bit ?. Yes.
5-Client start sending his/her data let say through a web form credit card number and so on.
The data is encrypted with server public key across the network
Clients? computer ip address is 217.34.109.113 connecting to web server ip 207.46.200.26 the connection goes through those routers:
217.34.109.113
217.34.109.119
217.34.109.129
213.120.62.225
194.72.9.2
206.24.226.99
207.46.154.5
207.46.200.5
Finally web server 207.46.200.26
If a hacker, intercepts the data package during the client server session in one of those routers. He or She could decrypt the data but it would take at least trillion trillion of years using today?s technology would be easier to hack the server and steal the private key.
6- During, the session the server decrypts the data using the certificate private key.

by nvraman

Hi,
In a SSL, there is a virtual connection between 2 nodes during the transaction time and the communication is secure. If some one tries to hack it, then the connection is broken.

This discussion is closed to new replies.