Secure Web Access: HTTP over SSL (https://)



  • SLL enables general-purpose secure and/or authenticated connections

  • Simplest use encrypts all data in transit, end-to-end, without authentication

  • If server has X.509 certificate, can authenticate itself to user

  • Use can authenticate by name-and-password over SSL

  • ... or user can authenticate with personal X.509 certificate

  • Implemented by (almost) all browsers
 
  1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22