|
By checking that the electronic ‘seal’ is
present and has not been broken, the recipient can confirm the identity
of the message sender and ensure that the message content was not
altered in transit. To create an electronic equivalent of physical
security, VeriSign employs a Public Key cryptosystem, sometimes
called an asymmetric system.
Single Key Cryptography
Throughout history,
most private messages were kept secret with single key cryptography,
sometimes called symmetric cryptography. Single key cryptography
is the way that most secret messages have been sent over the centuries.
In single key cryptography, there is a unique code (or key) for
both encrypting and decrypting messages. Single key cryptography
works as follows: Suppose Bob has one secret key. If Alice wants
to send Bob a secret message:
- Bob sends Alice
a copy of his secret key
- Alice encrypts a
message with Bob’s secret key
- Bob decrypts the
message with his secret key
Unfortunately,
this method has several problems. First, Bob must find a secure
method of getting his secret key to Alice. If the secret key is
intercepted, all of Bob’s communications are compromised. Second,
Bob needs to trust Alice. Alice may give Bob’s secret key to his
rivals. Or, she may read Bob’s other private messages or even imitate
Bob. Finally, if you have an organisation with people who need to
exchange secret messages, you will either need to have thousands
(if not millions) of secret keys, or you will need to rely on a
smaller number of keys, which opens the door to compromise.
Public Key Cryptography
VeriSign Server Certificates employ the more
advanced public key cryptography, which does not involve the sharing
of secret keys. Rather than using the same key to both encrypt and
decrypt data, a Server Certificate uses a matched pair of keys that
complement each other. When a message is encrypted by one key, only
the other key can decrypt it.
When the key-pair was generated
for Euro Car Parts, our ‘private key’ was installed on our server;
only our Senior Web Administrator has access to it. Our matching
‘public key,’ in contrast, is freely distributed as part of our
Server Certificate. We can share it with anyone, and even publish
it in directories. Customers or correspondents who want to communicate
with us privately can use the public key in our Server Certificate
to encrypt information before sending it to us. Only we can decrypt
the information, because only we have the private key.
Our Server Certificate contains
our name and identifying information, our public key, and the digital
signature of the issuing Certification Authority. It tells customers
and correspondents that the public key belongs to us.
The ultimate result of a VeriSign Server
Certificate: secure communications between
us and our customers that protect our customers and our business.
Cookies
We use "cookies" on our site to enable you to save your
Vehicle Information and e-mail address. A "cookie" is
a small text file that a website can place on your computer's hard
drive in order, for example, to make it possible for you to use
an online "shopping cart" to keep track of items you wish
to purchase.
The cookie transmits this
information back to the Web site's computer, which, generally speaking,
is the only computer that can read it. Most consumers do not know
that "cookies" are being placed on their computers when
they visit websites. If you want to know when this happens, or to
prevent it from happening, you can set your browser to warn you
when a website attempts to place a "cookie" on your computer.
Our site relies upon the use of cookies to ensure your vehicle details
are carried from page-to-page, but our cookies do not contain nor
track your personally identifiable information.
|