A customer contacts our site and accesses a secured URL: a page
secured by a Server ID (indicated by a URL that begins with "https:"
instead of just "http:" or by a message from the browser).
Our server responds, automatically sending our site's digital certificate,
which authenticates our site.
Your Web browser generates a unique "session key" to encrypt all
communications with the site.
Your browser encrypts the session key itself with the site's public
key so only the site can read the session key.
A secure session is now established. It all takes only seconds
and requires no action by you. Depending on the browser, you may
see a key icon becoming whole or a padlock closing, indicating that
the session is secure. |