What type of validation is required?
A trust hierarchy demands that entities “vouch” for each other. Companies that issue SSL certificates are in the business of establishing that entities on the web are, in fact, who they claim to be. The potential for criminal activity on the web (in relevance to SSL anyway), is in online “hijacking” of sites or connections to siphon encrypted data. Persons so inclined can easily “copy” web site interfaces and pose as well-known vendors, simply to collect confidential data. SSL certificates work to prevent this through ensuring that www.abc.com is, in fact, ABC Company. In the “real world” we use identification procedures like photo IDs, telephone calls and papers of incorporation to verify who we’re dealing with. If products or services are defective, buyers can seek recourse. In the “online world”, companies looking to use SSL certificates must prove to the Certification Authority that they have the right to present themselves online as ABC Company. This is done through a variety of m
A trust hierarchy demands that entities “vouch” for each other. Companies that issue SSL certificates are in the business of establishing that entities on the web are, in fact, who they claim to be. The potential for criminal activity on the web (in relevance to SSL anyway), is in online ‘hijacking’ of sites or connections to siphon encrypted data. Persons so inclined can easily “copy” web site interfaces and pose as well known vendors, simply to collect these data. SSL certificates work to prevent this through ensuring that www.abc.com is, in fact, ABC Co. In the “real world” we use identification procedures like photo ids, telephone calls and papers of incorporation to know with whom we are dealing. If products or services are defective, buyers can seek recourse. In the “online world”, companies wishing to use SSL certificates must prove to the certificate authority that they have the right to present themselves online as ABC Co. This is done through a variety of means in different S
