
Fake web site
So what is a website for real? There are files on a server somewhere. As you surf the Internet, connect your browser to the Web server that stores files, downloads, and it shows. The digital certificate is transferred to the web server and your browser when you connect to a site with https. The certificate contains two important points: the identification information to the web server and the encryption key that your web browser to create an encrypted tunnel to the web server. The encrypted tunnel protects your web traffic from the attacker.
Consequently your messages https screens are encrypted on the spot. Click on the Golden Palace (Firefox displayed it shows on the bottom of the Internet Explorer browser, while in the URL bar), that the digital certificate and identity information to disclose. But what if your browser does not decide how the certificate? Well, alerts you with a certificate error.
If you have spent much time online, you may have come about these warnings. What do you rule? Flee for your life? Read details? Next on the website anyway? Now, ignore, not only those Warning! There are several reasons why you are reluctant to pproceeding your browser to the requested site could.
Certificates are normally controlled by companies like Verisign and Thawte, after the applicant institution that issued the certificate, its identity. Certificates are digitally connected to a root certificate issuer is located. Browsers are preconfigured with a set of root certificates are always popular. Therefore, if you connect to your online account, your browser will automatically recognize the certificate and you can walk without problems. The certificates are valid for a specified period and must be renewed. If your certificate has expired, will recognize your browser and you will get the certificate error message. If your browser does not (see the source of the certificate is not connected to a known Root) certificate, the error message also. This is the case when deciding website owner, a certificate from any of the above-mentioned third parties and its own certificate, still provides the same functionality is provided Purchases: claims to identify and encryption.
This last point is important. Anyone can create a certificate. I can ask for a certificate within seconds my laptop to create https: / / www.your-online-bank.com. Yes, because your browser does not have a digital connection between my fake Web site certificate and the real root is recognized certificate, you will get a warning with a certificate error. Note that you do not click on it a habit to do so without a thought.