Role of SSL and the Security around it?

Could you explain in laymen terms exactly what an SSL accomplishes? How secure is it? Does it have the ability to protect large data files?
Is it true that when a user digitally signs and encrypts data over the Internet it places a “hole” in the eBusiness’ existing firewall (what happened with CD Universe stolen credit card numbers)? If so, how can you prevent this?