Encryption and Secure Servers

Using SSL (Secure Socket Layer), an encryption protocol, along with a digital certificate, provides protection for sensitive data during its transmission to your secure server. This encryption requires two keys. One is a public key which is used to encrypt the data through your customer's browser, and the other is a private key which decrypts the data and is held only by you (or those you authorize). By using a digital certificate provider (like VeriSign), the holder of the decryption key is validated as the correct owner and can then use the data as they need.

In this system, each player has access only to the information they need. The TTP (in this case, VeriSign) assures the shopper, through use of the digital certificate, that the Web site is indeed who they say they are, and the shopper can buy with the knowledge and comfort that they aren't being scammed.

For more information on encryption, see How Encryption Works.