Which protocol was developed by Netscape and uses certificates for secure transactions?

Which protocol was developed by Netscape and uses certificates for secure transactions?

• A. SSH
• B. IPSec
• C. SSL
• D. HTTPS

Answer: (C)

SSL was developed by Netscape to secure communications over the web by using digital certificates to establish trust and encrypt data in transit. In an SSL handshake, the server presents a certificate that proves its identity and is verified against trusted authorities. Once the server is authenticated, the client and server negotiate cryptographic parameters and generate a session key used for symmetric encryption of all following data. The certificate binding of a public key to a known identity is what enables authentication and trust in the channel. HTTPS is HTTP layered on top of SSL/TLS, so it relies on SSL/TLS for the security, rather than being a distinct protocol itself. SSH and IPSec serve different purposes (remote login and network-layer VPN security, respectively) and do not embody the Netscape-origin protocol designed for securing web transactions with certificates.

SSL was developed by Netscape to secure communications over the web by using digital certificates to establish trust and encrypt data in transit. In an SSL handshake, the server presents a certificate that proves its identity and is verified against trusted authorities. Once the server is authenticated, the client and server negotiate cryptographic parameters and generate a session key used for symmetric encryption of all following data. The certificate binding of a public key to a known identity is what enables authentication and trust in the channel.

HTTPS is HTTP layered on top of SSL/TLS, so it relies on SSL/TLS for the security, rather than being a distinct protocol itself. SSH and IPSec serve different purposes (remote login and network-layer VPN security, respectively) and do not embody the Netscape-origin protocol designed for securing web transactions with certificates.