YEARS OF EUROPEAN ONLINE ANNÉES DE EN LIGNE ...

WORKSHOP
5. A secure session is now established. It all takes only seconds and requires
no action by the user. Depending on the browser, the user may see a key
icon becoming whole or a padlock closing, indicating that the session is
secure.
A secure server is a web server that supports any of the major security
protocols, like SSL, which encrypt and decrypt messages to protect them
against third-party tampering. major security protocols include SSL, ShttP
(Secure httP), PCt, and IPSec (Internet Protocol Security).
A secure protocol (e.g. httPS) can be used to protect the transfer of data
from a secure server, with a security protocol such as SSL, tLS or PCt. Usually
the use of certiicates (by thawte, VeriSign, multicert, etc.) is recommended,
in order to verify that the address of the web server actually belongs to the
publisher of the legal gazette.
the SSL protocol runs above tCP/IP and below higher-level protocols
such as httP or ImAP. It uses tCP/IP on behalf of the higher-level protocols,
and allows an SSL-enabled server to authenticate itself to an SSL-enabled client,
the client to authenticate itself to the server, and both machines to establish
an encrypted connection.
the client uses the public key from the certiication authority’s certiicate
to validate the CA’s digital signature on the server certiicate being presented.
If the information in the server certiicate has changed since it was signed by
the CA, or if the CA certiicate’s public key does not correspond to the private
key used by the CA to sign the server certiicate, the client will not authenticate
the server’s identity. At this point, the client has determined that the server
certiicate is valid.
120 | 121
01_2007_5222_txt_ML.indd 121 6-12-2007 15:13:58