Criptografia - Secure HTTP (S-HTTP) Criptografia - Secure HTTP Kryptographie - Secure HTTP (S-HTTP) Cryptographie - Secure HTTP Criptografía - HTTP Seguro

Introduction to S-HTTP

S-HTTP (Secure HTTP) is a process that protects HTTP transactions and is based on an improvement to the HTTP protocol that was made in 1994 by EIT (Enterprise Integration Technologies). It makes it possible to establish a secure connection for e-commerce transactions by encrypting messages to guarantee customers that their bank card numbers and other personal information will remain confidential. One implementation of S-HTTP was developed by the company Terisa Systems to include a secure connection on web servers and browsers.

How S-HTTP works

Unlike SSL, which works on transport layers, S-HTTP guarantees message-based security using the HTTP protocol, by individually marking HTML documents with certificates. Whereas SSL is independent of the application used and encrypts all of the communication, S-HTTP is closely related to the HTTP protocol and individually encrypts each message.

S-HTTP messages are based on three components:

  • The HTTP message
  • The sender's cryptographic preferences
  • The recipient's preferences

As such, to decrypt an S-HTTP message, the message's recipient analyzes the message's headers to determine the type of method that was used to encrypt the message. Then, based on his current and past cryptographic preferences and on the sender's past cryptographic preferences, he is able to decrypt the message.

The complementary nature of S-HTTP and SSL

When SSL and S-HTTP were competitors, many people realized that the two security protocols were complementary, given that they do not work at the same level. SSL guarantees a secure internet connection whereas S-HTTP guarantees secure HTTP exchanges.

As a result, the company Terisa Systems, specialized in network protection, made of RSA Data Security and EIT, developed a development kit making it possible for developers to develop Web servers implementing SSL and S-HTTP (SecureWeb Server Toolkit), as well as Web clients using these protocols (SecureWeb Client Toolkit).

Last update on Thursday October 16, 2008 02:43:17 PM.This document entitled « Cryptography - Secure HTTP » from Kioskea (en.kioskea.net) is made available under the Creative Commons license. You can copy, modify copies of this page, under the conditions stipulated by the licence, as this note appears clearly.

Best answers for « Cryptography Secure HTTP » in :
Cryptography - Secure Sockets Layers (SSL) Show Introduction to SSL SSL (Secure Sockets Layers) is a process that manages the security of transactions made on the Internet. The SSL standard was developed by Netscape, together with Mastercard, Bank of America, MCI and Silicon Graphics. It is...
Download SSH Secure Shell Show SSH secure shell for workstations is a flexible client SSH allowing to connect in a secured way to remote applications. http://www.commentcamarche.net/faq/images/NHc6wz5jOYBhPXTis.png
Online scanning using F-secure ShowOnline scanning using F-secure Get Internet Explorer and go to: http://www.f-secure.com/en_EMEA/support/ Go to bottom of page and click on "Start scanning" A message appears: Do not panic, click "OK": Note the little warning...
Securing Gmail ShowSecuring Gmail By default connections to Gmail are not always done in a secure way(normally a simple HTTP connection), which means that information is sent "unprotected" on the web and are therefore easily accessible. To fix this,...
How to disable the security Center under windows XP? ShowHow to disable the security Center under windows XP? Intruduction Disable Alerts Turn off Windows Security Center Intruduction Windows security Center is a component that works under Windows XP service pack 2 for providing...
Download Eset Smart Security ShowAntivirus, antispyware, antispam, firewall: all-in-one! We cannot find a simple protection! Based on NOD32 antivirus, extremely little greedy in resources! Eset Smart Security is a protection solution to be tried!
The HTTP protocol ShowIntroduction to the HTTP protocol Since 1990 HTTP protocol (HyperText Transfer Protocol) has been the most widely used protocol on the Internet. Version 0.9 was only intended to transfer data over the Internet (in particular Web pages written in...
SD Card (Secure Digital) ShowSecure Digital Secure Digital memory (known as SD or SD Card) is a type of memory card created by Matsushita Electronic, SanDisk and Toshiba in January 2000. Secure Digital memory is a memory specifically developed to meet new safety requirements...
Information security officer (ISO) ShowInformation security officer (ISO) An ISO (information security officer) is in charge of setting and a company's security policy. He/she also plays a critical role in informing, advising, and alerting the general management on matters relating to...