SSL

• Session oriented, stateful. Integrated w/ HTTPS

• Client may optionally have a X.509 certificate.

• Server required to have an X.509 certificate

• Client verifies server certificate; server performs optional client authentication

• Server private key verified w/ a “challenge”.

• Agree to a shared secret for symmetric encryption

  • Session ID is agreed upon -- stored in server cache => not necessary to re-authenticate.
  • Data transfer using 128 bit keys

Previous slide

Next slide

Back to first slide

View graphic version