How secure is SSL ?

  • Thread starter Thread starter Johann Folkestad
  • Start date Start date
J

Johann Folkestad

I have been told that SSL only secures users credentials, and the rest of
the traffic is unencrypted. Is this true ?


Johann Folkestad
 
microsoft.public.win2000.security news group, Johann Folkestad
I have been told that SSL only secures users credentials, and the rest of
the traffic is unencrypted. Is this true ?
Click to expand...

No, it is not. Google on SSL and you'll find lots of information about
SSL.
 
Well, banks and e-stores rely on SSL. Not sure what the alternative is, if
you're dealing with client computers not under your control.
 
SSL does not even require user/client credentials though a user uses a sites
public key to encrypt a challenge to send to it to verify it's authenticity.
All the traffic is encrypted - well maybe a few bits could escape during
negotation according to posts here from MS, but it is considered extremely
secure as far as keeping the data confidential in transit. --- Steve

http://www.iona.com/support/docs/e2a/asp/5.0/j2ee/SecurityGuide/html/trsport-security3.html
 
Back
Top