Secure Socket Layer (SSL) 1

[121854]

When I'm using a Secure Socket Layer (SSL) to transmit and receive data. Does the data using SSL encrypted? If it is, what encryption is the standard? DES, DES3 etc.

 

[akirin]

Yes, the data is encrypted during a http communication.
And there are many kind of algorithms for SSL encryption.

http://www21.ocn.ne.jp/~k-west/SSLandTLS/draft302.txt

According to SSL V3, the lists of the algorithm are following:

A.6 The CipherSuite

CipherSuite SSL_RSA_WITH_NULL_MD5
CipherSuite SSL_RSA_WITH_NULL_SHA
CipherSuite SSL_RSA_EXPORT_WITH_RC4_40_MD5
CipherSuite SSL_RSA_WITH_RC4_128_MD5
CipherSuite SSL_RSA_WITH_RC4_128_SHA
:
:

If you want to connect to

http://www servers

on more secure encryption,
you can change the algorithm used on SSL handshake in both your
server and your client.


5.6.1.2 Client hello

cipher_suites

This is a list of the cryptographic options
supported by the client, sorted with the
client's first preference first. If the
session_id field is not empty (implying a
session resumption request) this vector must
include at least the cipher_suite from that
session. Values are defined in Appendix A.6.

5.6.1.3 Server hello

cipher_suite

The single cipher suite selected by the server
from the list in ClientHello.cipher_suites.
For resumed sessions this field is the value
from the state of the session being resumed.

Akirin from Japan.