How Secure Sockets Layer Works

As mentioned, plain HTTP sends data in cleartext, which is too risky for bank sites or other data-sensitive transactions. HTTPS is used to ensure safe and secure communication between a client and a web server. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are widely used to authenticate a service to a client and then to provide confidentiality (encryption) to the data being transmitted.

SSL/TLS works in a negotiation process—known as a handshake—between the client and the web server. The handshake ...

Get Internet and Web Application Security, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.