Frequently Asked Questions - Security
- What is Secure Sockets Layer(SSL)?
- Why do we require 128-bit SSL?
- What is 'HTTPS://'?
- How do I check my version and encryption strength?
- How do I update my browser, if necessary?
- Can you give me instructions to help me with the upgrade?
What is Secure Sockets Layer (SSL)?
Chunks of information (data) move around over the Internet in "envelopes" known as packets. A typical message is broken into multiple packets before being sent out across the Internet. Different individual packets may take different routes to reach their destination. When all the packets arrive at the destination computer, they are reassembled into the original message. It is possible for data packets to be intercepted by an unauthorized third party somewhere along the way between their source and destination. For most routine communications, it doesn't matter much if someone manages to intercept and read a few data packets. However, some pieces of information (for example personal information) need greater security protection. Secure Socket Layer (SSL) provides that protection by encrypting data as it is exchanged between computers.
SSL scrambles (or encrypts) data using a code (also referred to as a key) that is known only to the data's sender and recipient. The encrypted data is unreadable unless it is unscrambled using the correct key. Regardless of the path the data takes on the Internet, it remains secure because only the intended recipient has the key that will unlock the data. SSL technology is widely accepted and used in Web browsers and a variety of other Internet software.
The strength of the SSL encryption is based on the size of the key used to encrypt the data. The larger the key, the harder it is to crack the code. Most web browsers are equipped with 40-bit SSL encryption by default, or International Security. Online banking and similar applications within the United States have the option to use US Domestic Security, or SSL encryption with 128-bit keys (that's 2 raised to the 128th power).
Compare this to a briefcase that incorporates a lock with three combination wheels containing the numbers 0 through 9. It would take several hours to try each of the 1000 possible combination from 000 to 999 to discover the correct combination to unlock the briefcase. Now, imagine the time it would take to pick the lock of a briefcase that had a 128-bit lock. You could never fit 128 little wheels on a briefcase, but you could represent the same range of numbers with 32 wheels that each have 16 positions (the numbers 0 through 9, plus the letters A through F). The number of possible number combinations is astronomical; 309,485,009,821,345,068,724,781,056 to be exact. With such a large number, it is practically impossible for someone to decipher the key that protects the data.
The latest versions of Netscape Navigator and Microsoft Internet Explorer include support for 128-bit SSL encryption technology. Data vendors, such as banks, hospitals and online merchants, who want to implement secure Internet applications use this technology to seamlessly manage the entire SSL process. When your Web browser connects to a secure Web server using SSL, the browser displays a small padlock icon in the status bar at the bottom of the browser window. That way, you know when the data traveling back and forth between your browser and the vendor's Web site is being protected with SSL encryption.
Why do we require 128-bit SSL?
Harvard Vanguard Medical Associates uses the latest online security techniques to help ensure the security of your information. This security feature enables your web browser software to establish a secure session with Harvard Vanguard Medical Associates (and other SSL-protected web sites on the Internet) where all sensitive data exchanged between your computer and Harvard Vanguard Medical Associates is scrambled (encrypted) with the most powerful level of encryption tools available.
What is 'HTTPS://'?
While you navigate secure information, note the URL (Universal Resource Locator) starts with 'HTTPS://' rather than 'HTTP://'. The 'S' stands for secure. Secure means encrypted.
How do I check my version and encryption strength?
Both Netscape and Microsoft offer two versions of their browsers - 128 bit and 40 bit. If you are using a browser that came with your machine, it has, at most, 40-bit encryption. The only way to get a browser with 128-bit encryption is to download it directly from Netscape or Microsoft.
Microsoft Browsers:
To check the security level on Internet Explorer, choose "Help" from the browser menu,
and then select "About Internet Explorer" (see
below).
 |
This selection will bring up an information box with the encryption level listed under "Cipher Strength":
 |
Netscape Browsers:
To check the security level on Netscape Navigator, choose "Help"
from the browser menu, and then select "About Navigator"
(see below).
 |
This selection will bring up a Netscape information page. Look for the logo shown below. The line which says "This version supports high-grade security" indicates you have 128 bit encryption. If this line says "This version supports International security", you have 40 bit encryption.
 |
VeriSign Browser Check:
If you can't locate the browser and cipher information from the instructions above, click here to
check what browser version and encryption level you are currently using. Follow
the instructions to complete the test…
How do I update my browser, if necessary?
Updating your web browser software to meet the security requirements for the Harvard Vanguard Medical Associates is easier than you might think. Both Microsoft Internet Explorer and Netscape Communicator with Navigator are available free of charge and both of these popular browsers are capable of utilizing 128-bit SSL encryption. You may not have strong encryption, even if you have downloaded the most recent version of browser software. You may be able to simply add the 128-bit SSL security upgrade to your existing software. Depending on the software you have installed and your preference, your upgrade method will differ:
Click on the following connections for quick access to the web browser software download areas.
|
|
This link displays a list of Microsoft Internet Explorer software versions available for download |
|
|
|
|
|
This link will take Netscape software users directly to the Netscape upgrade page. |
Can you give me instructions to help me with the upgrade?
Instructions for downloading and installing Microsoft Internet Explorer
-
Click on the Get Internet Explorer button below to go to the Microsoft web site where you can start the download process.
-
Click on the heading for your computer platform and then select the desired version of Internet Explorer from the list.
-
Choose your preferred language and then choose USA as the download site.
-
Your web browser will start to download a small setup program for installing Internet Explorer. You can either run the program from the Internet or save it on your local hard disk and then run it from there.
-
Running the Internet Explorer Setup program displays a wizard that will walk you through the rest of the download and installation process. Just follow the onscreen instructions and click on Next to move to each succeeding screen of the wizard.
-
When you first install Internet Explorer, the default configuration supports only a limited form of SSL encryption. You'll need to follow the instructions in the next section to add 128-bit SSL encryption capabilities to your copy of Internet Explorer.
Please note: If you are downloading a browser or upgrade from work and are having problems, please contact your network administrator. Because of export laws regarding encryption, downloading a browser or an upgrade through a firewall may not be possible.
|
|
Click to go to the Microsoft Internet Explorer download site |
Instructions for adding 128-bit encryption to Microsoft Internet Explorer
-
Click on the Get Internet Explorer button below to go to the Microsoft web site where you can start the process of downloading the 128-bit encryption upgrade.
-
Read and accept the export restriction agreement.
-
Select the appropriate version of the upgrade (usually the default selection is correct) and begin the download. You can either run the upgrade program from the Internet or save it on your local hard disk and then run it from there.
-
When prompted to do so, confirm that you want to apply the upgrade. The process takes only a few seconds.
-
Reboot you computer and begin using your new, more secure web browser.
Please note: If you are downloading a browser or upgrade from work and are having problems, please contact your network administrator. Because of export laws regarding encryption, downloading a browser or an upgrade through a firewall may not be possible.
|
|
Click to begin upgrading Internet Explorer with 128-bit encryption |
Instructions for downloading and installing Netscape Communicator
-
Click on the Netscape Now button below to go to the Netscape web site where you can start the process of downloading Netscape Communicator with 128-bit encryption.
-
Click on the download button for US and Canadian customers.
-
Follow the onscreen instructions to download a small program -- SmartDownload Communicator -- that will manage the rest of the download process for you.
-
Run the SmartDownload Communicator program (double-click its icon on your desktop) to download the Netscape Communicator installation files.
-
When the download is complete, click the Install button and follow the onscreen instructions to install Netscape Communicator on your system.
Please note: If you are downloading a browser or upgrade from work and are having problems, please contact your network administrator. Because of export laws regarding encryption, downloading a browser or an upgrade through a firewall may not be possible.
|
|