March 2003
Intermediate to advanced
312 pages
7h 12m
English
SSL is basically a protocol that employs both symmetric and asymmetric cryptography to protect messages that use TCP as the transport-level protocol. Because of the high performance expense of asymmetric cryptography, it is only used to exchange the randomly generated symmetric key that is then used for the symmetric encryption of the HTTP messages. Figure 18.5 illustrates this point. The same symmetric key is used as long as the TCP connection remains open.

When used to protect Web communication, SSL’s position in the protocol stack is just ...
Read now
Unlock full access