The Need For SSL Certificates

As I have mentioned in a previous post, there are an amazing number of businesses nationally still don't have a website. Specifically forty four percent. Yet as incredible a statistic as that is, perhaps a more stunning and concerning one is that of the businesses that do have a website and are actively involved in transacting eCommerce on line and / or taking non financial, personal information through their site, still do so without having an SSL (Secure Sockets Layer) certificate on their site.

The SSL certificate is the necessary layer of security that needs to be set up to provide communication security over the internet and ensure that no unauthorised party is able to illegally listen into a discussion that they have no right to hear.

The technology works through the use of a symmetric key between the server and the user. This session key is then used to encrypt data flowing between these parties. This ensures that the message or information being transmitted is encrypted and thus unable to be understood by anyone eavesdropping on the conversation. 

There are various versions of the SSL protocols that are widely used in different applications such as web browsing, email, faxing, SMS messages and VOIP communication.  One of the key elements to ongoing security is forward secrecy which protects against a session key can not be generated from the long term asymmetric secret key.

 From a functional point of view having the SSL Certificate in place adds key steps to the communication process as described in the picture below. If there is no SSL security layer in place you simply have the blue and green steps performed. 

However by protecting your internet portal with an SSL or TLS (Transport Layer Security) Certificate, your system adds the additional layers of Sessional Key Exchange and Cipher Suite Negotiation that establishes the authenticity of the parties and ensures that they alone access messages that are not encrypted and therefore unusable.

The cost of not having an SSL if you’re routinely take personal or financial data online can be very high but thankfully the cost of having it is fairly modest and can be easily afforded by most businesses including SME's.
A business need only approach their Internet Service Provider (ISP) to have this installed at around $120 for an extended validation SSL that is a premium level protection as used by major businesses.

To learn more about SSL certificates, e-commerce, data privacy and all key aspects of digital media please feel free to go to the Digital Enterprise Program website on:  
 http://www.vecci.org.au/business-solutions/digital-enterprise-program/workshops

You will be eligible to attend any of the seven, free, two hour workshops, after which you will also be offered a free 4 hour one on one coaching session specifically on how to plan, position and promote your business with both digital and traditional marketing tolls.

So I hope to see you all there and until next time, good luck and good marketing.
Regards,
Daniele Lima.