SSL - Revision history

Franks at 04:20, 9 March 2007

2007-03-09T04:20:34Z

← Older revision		Revision as of 21:20, 8 March 2007
Line 4:		Line 4:

	To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:		To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:
	$ openssl s_client -connect [[variables\|http://www.example.com]]:443		$ [[openssl]] s_client -connect [[variables\|http://www.example.com]]:443

	SSL can be used for almost any transport layer protocol, but http is the most common.		SSL can be used for almost any transport layer protocol, but http is the most common.

Hawson: Added cert. table

2007-03-02T16:12:17Z

Added cert. table

← Older revision		Revision as of 09:12, 2 March 2007
Line 7:		Line 7:

	SSL can be used for almost any transport layer protocol, but http is the most common.		SSL can be used for almost any transport layer protocol, but http is the most common.

			In the case of websites, there can be some confusion over what hostnames ("CommonName" in the certficate parlance) are covered by a certificate issued for a given domain. This table should help to clarify things:

			{\| border="1" cellpadding="5" cellspacing="2" align="center"
			\|+ Desctiption of SSL certificate and domain interactions
			\|-
			!
			! colspan="3" \| CommonName listed on certificate
			\|-
			! Hostname !! domain.com !! *.domain.com !! alpha.domain.com
			\|- align ="center"
			! domain.com
			\| Yes \|\| No \|\| No
			\|-align ="center"
			! alpha.domain.com
			\| No \|\| Yes \|\| Yes
			\|-align ="center"
			! beta.domain.com
			\| No \|\| Yes \|\| No
			\|}

Franks at 03:37, 30 November 2005

2005-11-30T03:37:22Z

← Older revision		Revision as of 20:37, 29 November 2005
Line 1:		Line 1:
	Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred can not be read trivially if someone is [[sniffing]]. You will want to install SSL on your webserver if you intend on [[Registration:Host\| allowing users to register for anything]] on your website.		Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred can not be read trivially if someone is [[sniffing]]. You will want to install SSL on your webserver if you intend on [[Registration:Host\| allowing users to register]] for anything on your website.

	Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[Registration:User\|User Registration]] process.		Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[Registration:User\|User Registration]] process.
Line 5:		Line 5:
	To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:		To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:
	$ openssl s_client -connect [[variables\|http://www.example.com]]:443		$ openssl s_client -connect [[variables\|http://www.example.com]]:443

			SSL can be used for almost any transport layer protocol, but http is the most common.

Franks at 03:35, 30 November 2005

2005-11-30T03:35:48Z

← Older revision		Revision as of 20:35, 29 November 2005
Line 1:		Line 1:
	Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred can not be read trivially if someone is [[sniffing]].		Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred can not be read trivially if someone is [[sniffing]]. You will want to install SSL on your webserver if you intend on [[Registration:Host\| allowing users to register for anything]] on your website.

	Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[Registration:User\|User Registration]] process.		Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[Registration:User\|User Registration]] process.

Franks at 03:34, 30 November 2005

2005-11-30T03:34:24Z

← Older revision		Revision as of 20:34, 29 November 2005
Line 1:		Line 1:
	Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred can not be read trivially if someone is [[sniffing]].		Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred can not be read trivially if someone is [[sniffing]].

	Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[User ~~Registration~~\|Registration~~:User~~]] process.		Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[Registration:User\|User Registration]] process.

	To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:		To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:
	$ openssl s_client -connect [[variables\|http://www.example.com]]:443		$ openssl s_client -connect [[variables\|http://www.example.com]]:443

Franks at 23:45, 29 November 2005

2005-11-29T23:45:58Z

← Older revision		Revision as of 16:45, 29 November 2005
Line 1:		Line 1:
	Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred not be ~~done in the typical plain text which~~ is ~~fairly trivially~~ [[~~packet sniffed~~]].		Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred can not be read trivially if someone is [[sniffing]].

	Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[User Registration\|Registration:User]] process.		Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[User Registration\|Registration:User]] process.

Frankk at 23:21, 30 October 2005

2005-10-30T23:21:32Z

← Older revision		Revision as of 16:21, 30 October 2005
Line 1:		Line 1:
	Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with https:// instead of the typical http://, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred not be done in the typical plain text which is fairly trivially [[packet sniffed]].		Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with <nowiki>https://</nowiki> instead of the typical <nowiki>http://</nowiki>, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred not be done in the typical plain text which is fairly trivially [[packet sniffed]].

	Only enter personal information or credit card information into a website that is using https:// in the URL, this is covered in the [[User Registration\|Registration:User]] process.		Only enter personal information or credit card information into a website that is using <nowiki>https://</nowiki> in the URL, this is covered in the [[User Registration\|Registration:User]] process.

	To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:		To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:
	$ openssl s_client -connect [[variables\|http://www.example.com]]:443		$ openssl s_client -connect [[variables\|http://www.example.com]]:443

Frankk at 23:20, 30 October 2005

2005-10-30T23:20:40Z

New page

Originally created by the people at Netscape, the Secure Socket Layer (SSL) has been adopted as a standard for transfering data over the internet. If you've ever been to a website where the URL starts with https:// instead of the typical http://, you are using SSL. This means there is an encrypted tunnel between you and the remote machine, so everything transferred not be done in the typical plain text which is fairly trivially [[packet sniffed]].

Only enter personal information or credit card information into a website that is using https:// in the URL, this is covered in the [[User Registration|Registration:User]] process.

To get an idea of what happens behind the scenes when you surf the web using your browser to an SSL website:
$ openssl s_client -connect [[variables|http://www.example.com]]:443