does SSL encrypt contents of page?

Discussion in 'ASP.NET / ASP.NET Core' started by ashman, Jun 22, 2004.

Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.
  1. I always thought SSL only encrypts the post-data submitted by a form (using the public key supplied by the server).

    I just read a post about securing information using SSL (e.g. credit card info). Surely the HTML supplied by the server thru an SSL connection cannot be encrypted (since only the private key is used to decryt - and this remains secret on the server)?
     
  2. Bruce

    Bruce DiscountASP.NET Staff

    HTTPS connection basically encrypt ALL traffic to and from the web server (regardless of the protocol used, ie. POST or GET)

    quote:Originally posted by ashman

    I always thought SSL only encrypts the post-data submitted by a form (using the public key supplied by the server).

    I just read a post about securing information using SSL (e.g. credit card info). Surely the HTML supplied by the server thru an SSL connection cannot be encrypted (since only the private key is used to decryt - and this remains secret on the server)?
    </blockquote id="quote"></font id="quote">
     
  3. ok, so how does the browser decrypt the data, since it does not have access to the private key, and only the private key can decrypt the data?
     
  4. You can use a protocol analyzer and prove what is encrypted.
     
  5. Bruce

    Bruce DiscountASP.NET Staff

    all browsers are preinstalled with the root certificates.

    if you are using IE, pop open tools -> internet options -> content tab, you'll see all the certs there.


    quote:Originally posted by ashman

    ok, so how does the browser decrypt the data, since it does not have access to the private key, and only the private key can decrypt the data?
    </blockquote id="quote"></font id="quote">
     
  6. quote:Originally posted by bruce

    all browsers are preinstalled with the root certificates.
    </blockquote id="quote"></font id="quote">

    cool, thanks that makes sense now.
     
Thread Status:
Threads that have been inactive for 5 years or longer are closed to further replies. Please start a new thread.

Share This Page