With all of the security breaches that are constantly being reported by the major news sources, every company should be taking a look at their data systems and doing an audit to see where they can increase security. 

One of the simplest means of ensuring security when transmitting data over the wire is by using SSL.  SSL stands for Secure Sockets Layer, a protocol used by webservers that uses two digital keys to encrypt the data between a client (your browser) and a server (your webserver).  SSL has been in use since the mid-90’s and is extremely reliable in providing a means for transporting data securely.

The policies surrounding the installation and configuration of SSL certificates vary according to the webserver that you are using for your website, but the main premise of how SSL certificates is fairly standard.  The processes I am about to outline is not for any specific webserver or platform, but is an example of how SSL works in principle.

Step 1 – CREATE YOUR KEYS
You will need to create your keys on the server that you will using as your webserver, this is the safest and easiest way to manage your keys.  Most services that are used to create the keys needed for your platform will indicate which is your public key and which is your private key.  You will create one key that will be your private key that will be used on this server, do not give this key to anyone for any reason whatsoever.  If someone has your private key, you are almost certainly going to have your server compromised.  The other key is your public key and that is the one that you will use in the next step of this process.

…Continued in [Part 2]

 

3 Responses to Enhancing Data Security – [Part 1] Using SSL For Webservices

  1. Currently it sounds like Movable Type is the top blogging platform out there right now. (from what I’ve read) Is that what you are using on your blog?

  2. Henry says:

    Fine know-how! I have been looking for anything like this for some time finally. Thank you!

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>