What is an SSL certificate?

Identity security is a necessary part of life as criminals use the information they retrieve to benefit themselves and often cost their victims countless amounts of time and money. Individuals are constantly advised to exercise caution when divulging personal information to any source. In many instances it is necessary to provide the information to complete a business transaction or to complete an application. Security measures have been devised to safeguard that data so only those individuals requiring access will have it. SSL certificates are a form of online security.

SSL or secure socket layer ensures that data submitted online can not fall into the hands of someone who will misuse it. A website with a security certificate provides users with protection as it masks required data from all but the site owner. Using a mathematical algorithm, information is jumbled beyond recognition and transferred to those persons who require the material. Only this person will be able to see unscrambled data. Much like a lock and key the only person who can unlock the code is the person who owns the certificate.

When an individual arrives at a secure website he/she may notice a padlock symbol and another verification symbol such as a checkmark (Verisign), depending on the securing company. Clicking on either of these symbols reveals who the securing company is and when the certificate was obtained. This will also alert consumers as to whether the certificate is current.

There are various levels of security certificates. A self-signed certificate is owner generated and usually used for internal purposes only. A domain validation certificate is obtained easily and quickly as it only verifies the domain owner. A fully authenticated SSL certificate is granted only after certain validation is acquired. Applicants must prove the existence of the business, verify ownership of the domain, and must prove their authority in the business and website to apply. A wildcard certificate is provided to multiple hosts of a domain. A SAN allows more than 1 domain to be covered simultaneously. A code signing certificate ensures that whenever software is downloaded it is protected en route from cyber criminals attempting to attach a virus or other malicious programs. An extended validation certificate ensures the highest form of security and authentication. A website with this certificate turns the browsers address bar green.

Many instances require a security certification. Any online store where orders are accepted and credit card information is needed, should be secure. Any site that requires a login or sign in should have some form of security. A website that requires personal information such as address, birthdate, license # or any ID # should have security precautions. Sometimes certificates are required for other privacy and security reasons. Certificates may be used for internal internet communications within a corporation. Email can be securely protected. When sending or receiving information through mobile devices, a security program may be desired.

SSL certificates are most reliable if obtained from known certification authorities. Having a secure transmission route is the difference between sending information on a postcard and sending it in a privacy envelope.

What is a Secured Socket Layer (SSL)?

A Secured Socket Layer, or SSL, is the usual way that a website creates a secure connection with a web browser. Whenever a web surfer visits a secure site that uses SSL technology, it creates an encrypted link between their browser session and the web server. SSL is the industry standard for secure web communication and is used to protect millions of online transactions each day.

What Does Encryption Mean?

Encryption simply means that the information that is going back and forth between an individual's computer and the website is scrambled so that no one else can understand it. A formula on each side is used to scramble the information before sending it and unscramble it upon receipt. If a hacker happens to intercept the personal information en route, it would be worthless to them.

What is a SSL Certificate?

The web server must have an SSL certificate before it can create an SSL connection. When someone activates SSL protocols on their web server, they are asked to answer questions that will establish their identity. The questions ask for information about both the website and the company. After the SSL certificate is requested, the web server creates two cryptographic keys, one is a Private Key and the other is a Public Key. These keys are used along with the encryption formula to create the secure link between the web server and browser sessions.

Public Keys vs. Private Keys

As the name implies, the Public Key is not kept secret. It is placed into the Certificate Signing Request (CSR) which is a data file that contains the website's details. The CSR is submitted to the SSL Digital Certificate group for validation as part of the SSL certificate application process. Once the details are validated, the SSL certificate is officially issued, and the website is allowed to use SSL. Next, the web server confirms that the SSL certificate matches the Private Key. This makes sure that SSL certificate is only used by the website that originally requested it. At this point, the web server is able to create safe encrypted links, or communication paths, between its website and a customer's browser.

What's in a SSL Certificate?

Most SSL certificates include the domain name (web address), company name, company address, the certificate's expiration date, and information about the certification authority who issued the certificate. Individuals are not usually allowed to possess a SSL certificate. In virtually all cases, SSL certificates are only issued to companies.

How Does SSL Work with My Browser?

The typical web user isn't required to understand the complex process behind the SSL protocol. A key indicator is processed by the web browser to indicate that it is protected by an SSL-encrypted session, and the browser will show a small lock icon in the lower, right-hand corner of the screen. If the lock is clicked, it will display the SSL certificate and all the details.

Behind the scenes, the browser retrieves the SSL certificate whenever it connects to a secure site. The browser check to make sure that the certificate has not expired, whether or not the issuing authority is one that the browser trusts, and that the certificate is being used by the same website to which it was issued. If either safety check fails, the browser will let the user know that the site is not secured by SSL through a warning message. The user has the choice of trusting the site or leaving.

HTTP Secure

Hypertext Transfer Protocol Secure, or HTTPS, combines standard HTTP with SSL for secure identification and encrypted communication of web servers. This standard is frequently used for online payments and other transactions that involve sensitive information. One way to instantly know if a site is using the HTTPS standard is to look at the address at the top of the page. If the address starts with "https" instead of the typical "http", the site is using HTTPS security measures. It's important to keep in mind that only a portion of the website may be using HTTPS, while the vast majority might be using simple HTTP. The idea behind HTTPS is to create a secure channel over a mostly unsecure network. For example, while it is critical that online banking uses HTTPS to secure a customer's account information, they would not need to go to that extreme to protect pages that simply tell the public how to apply for a new loan or credit card.

What is VOIP?

"VOIP - Short for Voice Over Internet Protocol, a category of hardware and software that enables people to use the Internet as the transmission medium for telephone calls by sending voice data in packets using IP rather than by traditional circuit transmissions..." (quoted from Webopedia Computer Dictionary).

Uses

VOIP has become a growing method of communication in the modern world, especially in sales-oriented jobs. It has been integrated mostly for business purposes to replace conventional phone calls. The methods of use can be classified into three major categories:

• To interconnect VOIP phones within a single building using the building's Local Area Network (LAN)
• To interconnect VOIP phones between multiple locations of the same organization using a backbone network
• To interconnect VOIP phones to regular telephones in different organizations or for sales purposes

Benefits

Toll-Free Calls

The main purpose of VOIP is to provide a method of cheap yet extensive communication. Regular telephone calls can become costly if used too frequently, yet with VOIP one only needs to pay for a good internet connection and subscription to a VOIP service. With these two facilities handy, VOIP becomes a capability to make limitless phone calls through the internet. Although the person at the other end may be using a regular phone, the VOIP user either uses a computer or VOIP phone to communicate.

The major advantage of VOIP is that it allows the user to make as many phone calls as they like for a fixed price instead of being charged by the minute. This makes a huge cutback on costs for jobs such as telephone marketing that require making many phone calls for hours every day.

VOIP can become low-cost or toll-free for people who are using only the internet to communicate. If both or all users are using the internet to communicate, VOIP becomes a way of talking or conferencing without having to pay any additional fee apart from the regular fee for internet.

Reduced Wiring Costs

Using VOIP can also minimize building wiring costs in new or renovated buildings due to reduced wire infrastructure. Instead of using many cable systems such as data networking, telephone connections, and cable distribution, VOIP makes it possible to rely on less cabling costs in terms of maintenance as well as initial installment.

Easy Relocation

Anyone who has relocated their job or home knows how difficult it is to switch local phone numbers, not only for them but even more so for others who want to call them. Cell phones have largely helped to solve this problem, but cell phones are one of the costliest methods of common communication. VOIP provides a cheaper solution, since internet is a universal medium. A VOIP instrument can be relocated without central administrative support. With the internet being a global medium, VOIP allows users to communicate from anywhere in the world at one of the lowest costs possible.

Roaming Facility

To use your regular local phone you have to access it from your regular phone line. It would not be possible for you to make a phone call using your local phone line if you are somewhere else using someone else's phone. Here is another problem that VOIP helps us overcome. With VOIP, you can use someone else's phone to use your VOIP connection. Some VOIP systems allow people to walk up to a telephone instrument in any office and dial a couple of numbers on the keypad ("log in"). That telephone then temporarily assumes the configuration of the telephone line in your home office. By assuming your telephone number, your list of speed dial numbers, and your intercom settings, it becomes a temporary substitute for your VOIP phone in your office!

Dynamic IP vs Static IP

Static IP addressing is for one customer on one IP address and Dynamic IP addressing assigns a different IP address each time the ISP customer logs on to their computer, but this is dependent upon the Internet Service Provider (ISP) because some ISP's only change the IP address as they deem it necessary.

If you have Dynamic IP Addressing through your Website Host it means that you are sharing an IP Address with several other customers.

If you are a beginner on the internet, an avid internet user, are entertaining the thought of starting your own website business, are a gamer, use VOIP or VPN there are several things you should know about IP Addressing.

Static IP Addressing

If you feel the need to always know what your IP address is then you need a Static IP address, because it is constant. Static IP addresses are more reliable for Voice over Internet Protocol (VOIP), more reliable to host a gaming website or to play X-Box, Play Station, use Virtual Private Network for secure access to files from your company network computer, etc. Static IP addresses are also great if you use your computer as a server, as it should give your file server faster file uploads and downloads. Another plus with Static IP's, when hosting a website you are not sharing your IP with another company who sends out a lot of E-mail SPAM and not only has their website been shut down but in turn gets your IP address blacklisted.

In contrast a static IP address can become a security risk, because the address is always the same. Static IP's are easier to track for data mining companies. Static IP addressing is less cost effective than Dynamic IP Addressing.

Dynamic IP Addressing

The biggest advantages of Dynamic IP Addressing are less security risk as the computer is assigned a new IP address each time the customer logs on, they are cost effective and there is automatic network configuration (the less human intervention with network configuration the better). Dynamic addressing is usually used by ISP's so that one IP address can be assigned to several users, however some ISP's use Sticky Dynamic IP Addressing and do not change the IP address very often. Dynamic IP Addressing can be used by families with several computers or by a small business owner who has a home office. The software that comes with a router allows for Dynamic Host Configuration Protocol (DHCP) setup and assigns each computer attached to the router an IP address automatically.

In contrast, Dynamic IP addressing should not be used for VOIP, VPN, playing online games or game hosting because Dynamic IP addressing is less reliable then Static IP addressing and could cause the service to disconnect while you are on a VOIP, VPN or gaming.

What is an IP Address?

No doubt you've heard the term "IP address." Unless you're a techie, though, you may not have more than a shadowy notion of what an IP address actually is or how it works. Let's explore the concept.

An IP address is a fascinating product of modern computer technology designed to allow one computer (or other digital device) to communicate with another via the Internet. IP addresses allow the location of literally billions of digital devices that are connected to the Internet to be pinpointed and differentiated from other devices. In the same sense that someone needs your mailing address to send you a letter, a remote computer needs your IP address to communicate with your computer.

"IP" stands for Internet Protocol, so an IP address is an Internet Protocol address. What does that mean? An Internet Protocol is a set of rules that govern Internet activity and facilitate completion of a variety of actions on the World Wide Web. Therefore an Internet Protocol address is part of the systematically laid out interconnected grid that governs online communication by identifying both initiating devices and various Internet destinations, thereby making two-way communication possible.

An IP address consists of four numbers, each of which contains one to three digits, with a single dot (.) separating each number or set of digits. Each of the four numbers can range from 0 to 255. Here's an example of what an IP address might look like: 78.125.0.209. This innocuous-looking group of four numbers is the key that empowers you and me to send and retrieve data over our Internet connections, ensuring that our messages, as well as our requests for data and the data we've requested, will reach their correct Internet destinations. Without this numeric protocol, sending and receiving data over the World Wide Web would be impossible.

IP addresses can be either static or dynamic. Static IP addresses never change. They serve as a permanent Internet address and provide a simple and reliable way for remote computers to contact you. Static IP addresses reveal such information as the continent, country, region, and city in which a computer is located; the ISP (Internet Service Provider) that services that particular computer; and such technical information as the precise latitude and longitude of the country, as well as the locale, of the computer. Many websites provide IP address look-up services to their visitors, free of charge. If you're curious about your own IP address, you can locate these websites by performing a Google search.

Dynamic IP addresses are temporary and are assigned each time a computer accesses the Internet. They are, in effect, borrowed from a pool of IP addresses that are shared among various computers. Since a limited number of static IP addresses are available, many ISPs reserve a portion of their assigned addresses for sharing among their subscribers in this way. This lowers costs and allows them to service far more subscribers than they otherwise could.

Static IP addresses are generally preferable for such uses as VOIP (Voice over Internet Protocol), online gaming, or any other purpose where users need to make it easy for other computers to locate and connect to them. Easy access can also be facilitated when using a dynamic IP address through the use of a dynamic DNS service, which enables other computers to find you even though you may be using a temporary, one-time IP address. This often entails an extra charge, however, so check with your ISP.

Static IP addresses are considered somewhat less secure than dynamic IP addresses, since they are easier to track for data mining purposes. However, following safe Internet practices can help mitigate this potential problem and keep your computer secure no matter what type of IP address you use.