SSL Certificates are digital certificates that authenticate the identity of a Web site to visiting browsers and encrypt information for the server via Secure Sockets Layer (SSL) technology.
Once you enter our secure area of the SSL-protected website, the following takes place:
• Your browser requests a secure session from the server on which the website is stored.
• The server responds by sending your browser a digital copy of its server certificate.
• Your browser verifies that the server’s certificate is valid, is being used by the website for which it was issued, and has been issued by a Certificate Authority that the browser trusts.
• If the certificate is validated, the browser generates a one-time “session” key and encrypts it with the server’s public key.
• Your browser sends the encrypted session key to the server so that both server and browser have a copy.
• The server decrypts the session key using its private key.• The SSL “handshake” process is complete, and a secure connection has been established.
• A padlock icon and “https://” prefix appear in the visitor’s browser bar, indicating that a secure session is under way (unsecured websites showing an http:// prefix typically lose customers at this point).
Nirvana Shops' GoDaddy.com SSL certificates support both industry-standard 128-bit (used by banks to safeguardsensitive data) and high-grade 256-bit SSL encryption to protect online transactions. The actual encryption strength on a secure connection is determined by the user’s browser and theserver that the website resides on.
For example, the combination of a Firefox® browser and anApache 2.X Web server secured by a GoDaddy.com certificate results in up to 256-bit encryption.Encryption strength is measured in key length — or the number of bits in the key. To decipher an SSLcommunication, one would need to generate the correct decoding key. Mathematically speaking, 2npossible values exist for an n-bit key. Thus, 40-bit encryption involves 240 possible values. 128- and256-bit keys involve a staggering 2,128 and 2,256 possible combinations respectively, rendering theencrypted data virtually immune to decryption by an unauthorized party.Even with a brute-force attack (the process of systematically trying all possible combinations until theright one is found), cracking a 128- or 256-bit encryption is computationally unfeasible.