{"id":5114,"date":"2021-07-29T10:58:34","date_gmt":"2021-07-29T05:28:34","guid":{"rendered":"https:\/\/razorpay.com\/learn\/?p=5114"},"modified":"2024-09-27T13:20:54","modified_gmt":"2024-09-27T07:50:54","slug":"introduction-to-ssl-what-is-it-and-why-is-it-important","status":"publish","type":"post","link":"https:\/\/razorpay.com\/learn\/introduction-to-ssl-what-is-it-and-why-is-it-important\/","title":{"rendered":"Introduction to SSL &#8211; What Is It and Why Is It Important?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">Have you ever wondered why few URLs start with <\/span><b>HTTP:\/\/<\/b><span style=\"font-weight: 400;\">, while others begin with <\/span><b>HTTPS:\/\/<\/b><span style=\"font-weight: 400;\">? You might notice <\/span><b>HTTPS:\/\/<\/b><span style=\"font-weight: 400;\"> for a website that provides sensitive information like banking or websites which require your credit card details.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Do you know why they use<\/span><b> HTTPS:\/\/<\/b><span style=\"font-weight: 400;\"> and not <\/span><b>HTTP:\/\/<\/b><span style=\"font-weight: 400;\">? An extra &#8220;s&#8221; denotes that your connection is safe, secure, encrypted. You can provide your sensitive information without thinking twice. SSL is the technology that powers this extra secure connection. As an end-user, you would want the website to use <\/span><b>HTTPS:\/\/<\/b><span style=\"font-weight: 400;\"> to ensure that your data is safe.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">As a marketer, you would need to ensure that your website uses an SSL certificate. Keep reading this article to understand what SSL is and why it is crucial for your business.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">What is SSL?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">SSL (Secure Sockets Layer) is a standard technology for the security protocol used between a host (server) and client (web browser). SSL certificates ensure a secure and encrypted connection between devices across a network.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">SSL uses encrypted data flow and known authenticated identity to establish a trusted communication between devices or browsers. A trusted communication ensures that all the data passed between two devices stays private and intrinsic. Millions of websites use SSL (industry-standard protocol) to protect the online transactions of their end-users or customers.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">SSL uses encrypted data flow and known authenticated identity to establish secure communication between two devices.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The authenticated identity enables the receiving device (client) to confirm the identity of the transmitting device (server). Encrypted data flow is the technology that encrypts the connection and secures the data passing between the client and server.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">What are the Benefits of Using SSL?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Many people live under the assumption that SSL certificates are only beneficial for websites that provide extra sensitive data like <a href=\"https:\/\/razorpay.com\">online payment<\/a>, net banking, credit card transactions, etc. While SSL certificates are crucial for such websites, their benefits are no longer limited to these websites.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It provides the following benefits:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Encryption is one of the prime benefits of an SSL certificate. When a user enters data on any website, the information moves through several gateways before reaching the destination. Without a secure connection, this data can easily be subject to malicious attacks. An SSL certificate ensures point-to-point protection during data transport.\u00a0\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Authentication is another benefit of an SSL certificate. An SSL-trusted connection ensures that the client is receiving data from the correct server. SSL certificate helps in protecting data against malicious attacks.<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Data Integrity is also one of the benefits of an SSL certificate. During data transport, SSL includes Message Authentication Code (MAC) to ensure zero data loss.<\/span><\/li>\n<\/ul>\n<h2><span style=\"font-weight: 400;\">What are the validation levels of the Certificate?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">An SSL certificate aims at providing a secure and encrypted connection between a server and a client. Each SSL certificate includes data about the identity to which it has been issued. It has the following validation levels:<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Domain Validation (DV)\u00a0<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">This validation is the lowest level of encryption and is displayed as a green-colored padlock in the address bar. It validates that the certificate holder is genuinely in charge of the domain name to which this certificate has been issued. This certificate issuance does not take much time. You require only a few documents to apply for this validation. It is recommended only for websites that require authentication but are not the main targets of malicious attacks.\u00a0\u00a0<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Organisation validation (OV)\u00a0<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">This validation is the middle level of encryption. It validates the identity and location of an enterprise to which this certificate has been issued.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Extended Validation (EV)\u00a0<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">This validation is the highest level of SSL certificate authentication. It follows a few standard protocols (highly trusted) to validate the identity of the certificate holder.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This validation displays the HTTPS, organization name, and organization location in the address bar to verify that it is a trusted website. T<\/span><\/p>\n<p><span style=\"font-weight: 400;\">These are the most expensive validations but are equally worthy of displaying the legitimacy of your business from the address bar.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">How is your sensitive information secure?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">An SSL certificate establishes a secure and encrypted connection between the client (browser) and the server. This encryption ensures that all the data passing between these two devices cannot be read by any third person without decryption.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The transmitting and receiving devices perform this encryption and decryption operation. This approach prevents the information from malicious attacks. Attackers will not be able to read and understand the encrypted data.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">How many domains can it secure?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">SSL certificates fall into three categories:<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Basic<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">A basic certificate secures only a single domain or subdomain name. If you want to protect more than one domain using a basic SSL certificate, you must install certificates corresponding to the number of domain names you wish to secure. A basic certificate is available in DV, OV, and EV validation levels.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Wildcard<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">A Wildcard certificate secures an unlimited subdomain under the prime domain name. If you purchase an SSL certificate for one particular domain, you can use the same certificate for all its subdomains. For example, if the prime domain name is www.example.com, then you can secure the following subdomains under this domain:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">www.example.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">wishlist.example.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">ftp.example.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">checkout.example.com<\/span><\/li>\n<\/ul>\n<h3><span style=\"font-weight: 400;\">Multi-domain or SAN<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">As the name states, a multi-domain certificate secures hundreds or thousands of domain names. For example, it protects the following domains:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">www.example.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">www.checkout.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">www.shopping.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">wishlist.example.com<\/span><\/li>\n<li style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">ftp.shopping.com<\/span><\/li>\n<\/ul>\n<h2><span style=\"font-weight: 400;\">Conclusion<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">An SSL certificate is a crucial element of the current information system. No matter how small or big a business platform is, customers or users expect a secure connection when browsing through any website. Without SSL certificates, it is impossible to establish a secure connection with websites like e-commerce, net banking platforms, online shopping, etc. These security certificates might not be visible to the end-users, but organizations depend primarily on these certificates to conduct business today. <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Did you know? There are certain are protocols for establishing authenticated and encrypted links between networked computers. Read more here. <\/p>\n","protected":false},"author":151156477,"featured_media":13680,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3507],"tags":[3534,1987,2633],"class_list":{"0":"post-5114","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-business-growth","8":"tag-network","9":"tag-security","10":"tag-ssl-certificate"},"_links":{"self":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts\/5114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/users\/151156477"}],"replies":[{"embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/comments?post=5114"}],"version-history":[{"count":2,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts\/5114\/revisions"}],"predecessor-version":[{"id":9890,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/posts\/5114\/revisions\/9890"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/media\/13680"}],"wp:attachment":[{"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/media?parent=5114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/categories?post=5114"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/learn.razorpay.in\/learn\/wp-json\/wp\/v2\/tags?post=5114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}