SSL Doesn't Protect Everything

Remember the tunnel that SSL sets up to protect your transactions? It is important to understand that the tunnel is the only protection that SSL gives you. Although the tunnel is safe and secure, the computers at each end of it might not be. SSL only protects information in transit. After your credit card or any other information has made it across the Internet, it sits on a server in a database. SSL cannot protect the database or the server from being attacked. The server still needs the basic kind of protections that we discuss throughout this book. Firewalls, antivirus software, the latest operating system patches, and good security awareness are some of the fundamental protections that are needed.

Your personal ...

Get Privacy Defended: Protecting Yourself Online now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.