The Secure Sockets Layer (SSL) protocol has become the universal
standard on the Web for authenticating sites and for
encrypting
communications between users and Web servers. Because SSL is built
into all major browsers and Web server
s, simply installing a digital
certificate or Server ID enables SSL capabilities.
SSL server authentication allows users to confirm a Web server's
identity. SSL-enabled client software, such as a Web
browser, can
automatically check that a server's certificate and public ID are
valid and have been issued by a certificate
authority (CA) — such as
VeriSign — listed in the client software's list of trusted CAs. SSL
server authentication is vital for
secure e-commerce
transactions.

An encrypted SSL connection requires all information sent between
a client and a server to
be encrypted by the sending software and
decrypted by the receiving software, protecting private
information
from interception over the Internet. In addition, all data sent over
an encrypted SSL
connection is protected with a mechanism for
detecting tampering — that is, for automatically
determining whether
the data has been altered in transit. This means that users can
confidently
send private data, such as credit card numbers, to a
website, trusting that SSL keeps it private
and confidential.