Typically the server sends its certificate to the client to prove its identity, so that the client knows that its connection to the website has not been re-directed by an attacker. Most modern Linux distributions include SSL support in their Apache package as standard though.Īt the heart of the SSL protocol are digital certificates, which are used for both authentication and encryption. The *Configuring Apache as a proxy server* section explains how to check for and possibly enable the mod_proxy module, and you can follow those same instructions for mod_ssl as well. However, this depends on having the mod_ssl Apache module compiled in or available for dynamic loading, which is not always the case. You can configure Apache to use HTTPS on a per-virtual server basis, or to use it for all servers. Almost every browser supports the HTTPS protocol, and uses it when retrieving URLs that start with instead of the normal Whereas the normal HTTP protocol use TCP port 80, the HTTPS protocol uses port 443. The result is a new protocol called HTTPS, which is used by all websites that want to operate securely. However, in this chapter we are only concerned with the encryption of web page requests and responses, which is done by encrypting HTTP protocol data with SSL. The SSL protocol can be used to encrypt any kind of data that would normally travel over an unencrypted TCP connection. It also allows clients to authenticate themselves to servers, which can be used to replace usernames and passwords with digital certificates. It allows servers to authenticate themselves to clients, so that a web browser can be sure that it is connecting to the website that is thinks it is. It encrypts network traffic, so that an attacker cannot listen in on the network and capture sensitive information such as passwords and credit card numbers. SSL is a protocol for making secure, authenticated connections across an insecure network like the Internet.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |