Encryption
Encryption is used to ensure that computer-based information can only be read by the intended person. Usually, complex mathematics is used to scramble the information, and then the reverse procedure (decryption) is used to unscramble it by the intended recipient. The good news is that the web browser takes care of this so that most of the time, you wont even be aware that this process has taken place.
Encryption is becoming more important with the advent of Internet shopping and banking. For example if you are sending your credit card details over the Internet you will want to ensure that only the intended company is able to read your credit card number.
In practice with the Windows operating systems, this is done by using 'secure servers'. Websites undertaking Internet banking, or those asking for detailed personal information or credit card numbers, should be using a secure server.
How do I know a transaction is encrypted?
There are several important indicators of encryption.
1.The URL (address of the website) will change from 'HTTP" to 'HTTPS". The 'S' stands for secure server.
AND
2.A small closed padlock will appear in the bottom right of the browser page.
If you double click on the padlock a certificate should appear which looks something like this:
There are some situations where websites have been known to imitate a secure site by providing a fake certificate or by posting a certificate that is out of date.
It is important to check:
- that the certificate is issued to the business that owns the website
- that the business who owns the certificate is different than the company who issued the certificate
- that the certificate is not out of date.
If the certificate looks problematic or is out of date, the user should not use the website.
Operating systems other than Windows XP, some browsers or indeed email software may approach encryption in a slightly different manner and you may need to refer to the user guides.
How can I know if the encryption indicators are authentic?
First, you need to have entered the URL of the website yourself (NEVER follow a link to a site for a secure transaction from an email - see more about phishing in the Fraud section). If you then see a padlock with an up-to-date certificate and https: in the address you can have very reasonable assurance that your transaction is encrypted.
Click here to return to the NetSafe Computer Security home page.
|
|
