 |
» |
|
|
|
|
|
When you use IT Resource Center, you can choose to use either our standard or secure Web servers. Many but not all areas in ITRC are available in both standard and secure modes.
|
|
|
|
|
|
|
|
|
When you use the standard Web server, your session with ITRC is conducted across the Internet in unencrypted form. Information you submit - for example, your User ID and Password when you login - is sent across the Internet in the same format in which you enter it. Screens which the ITRCdisplays to you are likewise left open and readable when sent across the Internet. In the event a third party is monitoring your session traffic, this information could be read without your knowledge.
|
|
|
|
|
However, because the standard server does not encrypt its traffic, you may experience faster performance when using it.
|
|
|
|
|
|
|
|
|
When you use the secure Web server, your session with ITRC is encrypted. Data you submit is encoded by your browser using a unique secret key (a session key ), which your browser and the secure server negotiate at the beginning of your session. When your encrypted data is sent over the Internet, any third party monitoring your traffic will effectively be unable to read it. But the ITRC secure server will be able to decrypt it and handle your request normally. Such encryption also occurs when the ITRC displays screens back to you.
|
|
|
|
|
Our secure server uses the Secure Sockets Layer (SSL) protocol for managing your encrypted session. You must have a browser which supports this protocol in order to use the secure server. Examples of supported browsers are Netscape Navigator 2.0 and above, Netscape Communicator 4.0 and above, and Microsoft Internet Explorer 3.0 and above.
|
|
|
|
|
For your information, 128-bit "domestic-grade" encryption is used with customers inside the United States (who themselves are using browsers with domestic-grade encryption enabled). Forty bit "international-grade" encryption is used with all other customers.
|
|
|
|
|
Many resources for more information about SSL and encryption are available on the Internet.
|
|
|
If your current URL begins with http://, then you are using the standard server. If it begins with https://, then you are using the secure server. Most browsers which support SSL also display various icons which indicate the mode used for your current page.
|
|
|
|
Whether you choose to use the standard or secure servers is up to you. The same ITRC applications are available through either server. You can switch at any time during your session, by choosing the alternate server from the ITRC Main page.
|
|
|
|
|
|
Printable version
