The Secure Sockets Layer (SSL) protocol, originally developed by
Netscape, became the universal standard on the Web for authenticating
Web sites to Web browser users, and for encrypting communications between
browser users and Web servers. To remove the risk of Netscape's intellectual
rights causing problems in the future, versions of the protocol after version
3 were renamed Transport Layer Security (TLS) with versions starting with 1.0.
TLS has developed into higher versions and has become much more secure than SSL.
With the discover of the "POODLE" venerability of SSLv3, no SSL protocol is considered
sufficiently secure anymore. This website has all versions of SSL disabled so early
web brousers like, IE version 6, can not use that protocol.
This special secure protocol layer is built into all
major Web browsers and Web servers used today. To enable its use with a
Web site, a Digital Certificate, or Server ID, must be installed on a
secure Web server. When the Web page URL starts with "https:", the
secure Web server and your Web browser process the page using the TLS or SSL
protocol which incorporates secure encryption to protect your personal
information.
We have obtained our own Digital Certificate which is the digital
credential that enables you to verify our site's authenticity and to
communicate with it securely via TLS encryption. When on a secure page,
you can view our Digital Certificate by clicking on your browser's key or
padlock icon which indicates that the page is secure. You can also verify
our Digital Certificate information by clicking on the VeriSign Secure
Site Icon in the left margin of most of our Web pages. For your
protection, all our pages which contain forms for personal data entry are
secured with TLS using our own Digital Certificate obtained from
VeriSign, Inc.
TLS/SSL Authentication and Encryption
TLS/SSL server authentication enables you to confirm our Web server's
identity. TLS/SSL-enabled client software, such as your Web browser, can
automatically check that a server's certificate and public ID are valid
and have been issued by a certificate authority (CA) - such as
VeriSign, Inc. - listed in the client software's list of trusted
certificate authorities. TLS/SSL server authentication is vital for secure
e-commerce transactions in which customers, like you, are sending charge
card numbers over the Web and first want to verify the receiving server's
identity. This enables you to determine that we are who we claim to be,
not a bogus online store front running on an unauthorized server.
An encrypted TLS/SSL connection requires all information sent between a
client (your Web browser) and our site's server to be encrypted by the
sending software and decrypted by the receiving software, protecting your
private information from interception over the Internet. In addition, all
data sent over an encrypted TLS connection is protected with a mechanism
for detecting tampering - that is, for automatically determining whether
the data has been altered in transit. This means that you can confidently
send private data, such as charge card numbers, to our Web site, trusting
that TLS keeps it private and confidential.
How the TLS/SSL Protocols Work
- As a customer your Web browser (client) contacts our Web site's server
and accesses a secure Web page: a page secured by our Digital
Certificate or Server ID (indicated by a URL that begins with "https:"
instead of just "http:" or by a special message from your
browser).
- Our site's server responds, automatically sending our Digital
Certificate (Server ID) to your Web browser. This authenticates
our site and provides our public key.
- Your Web browser verifies our Digital ID then generates its own unique
"session key" to encrypt all communications with our site.
- Your Web browser encrypts the session key itself with our site's
public key so only our site can read the session key. The encrypted
session key is automatically sent to our server.
- A secure session is now established. It all takes only seconds and
requires no action on your part. Depending on the browser you're
using, the you may see a key icon becoming whole (unbroken) or a
padlock closing, indicating that the session is secure.
- You can click on the key or padlock icon to view our Digital
Certificate information which includes its valid date range, the
Digital ID issuing company (VeriSign, Inc.), our company's name and
URL to which the certificate was issued, etc.
Your Personal Privacy is Important to Us
Ristenbatt Vacuum Cleaner Service is committed to maintaining your
confidence and trust. It is our policy that personal information,
such as your name, postal and e-mail address, telephone number or charge
card information, is private and confidential. Therefore, we
continue to invested significant resources to maintain mechanisms to
ensure that your personal information remains confidential. These include,
but are not limited to, obtaining our own Digital Certificate,
Processing Charge Cards
via a Secure Gateway and establishing and implementing our
Personal Information
Privacy Policy. It is our hope that you will feel comfortable, secure
and confident when purchasing items from our
Online Store for Vacuum Cleaner Products.
Next Policy: Processing Charge Cards via a Secure Gateway