YEARS OF EUROPEAN ONLINE ANNÉES DE EN LIGNE ...

the next step conirms that the server is actually located at the same network
address speciied by the domain name in the server certiicate. Users
must perform this step and must refuse to authenticate the server or establish
a connection if the domain names do not match. If the server’s actual domain
name matches the domain name in the server certiicate, the client goes on to
next step, where the server is authenticated.
the SSL protocol supports the use of a variety of different cryptographic algorithms,
or ciphers, for use in operations such as authenticating the server and client
to each other and transmitting certiicates. well-known algorithms include:
• DES (Data Encryption Standard): an encryption algorithm used by the US
government,
• DSA (Digital Signature Algorithm): part of the digital authentication standard,
• RSA: a public-key algorithm for both encryption and authentication, developed
by Rivest, Shamir and Adleman.
Among the open-source products, the modSSL module provides strong
cryptography for the Apache 1.3 web server via the Secure Sockets Layer (SSL
v2/v3) and transport Layer Security (tLS v1) protocols by the help of the
open-source SSL/tLS toolkit OpenSSL. Additional information can be found
at www.modssl.org. further information on OpenSSL can found at http://
www.openssl.org/about/.
Practices
FRANCE
A secure server with a certiicate is used in the Journal officiel.
01_2007_5222_txt_ML.indd 122 6-12-2007 15:13:59