SSL is an open protocol for securing data communications across computer networks. The broad support for this protocol will promote interoperability between products from many organizations and will speed the growth of electronic commerce on the Internet and private TCP/IP networks. Today, more than 3 million people are already using SSL-enabled products, which have been available since December 1994. In October 1994, Netscape published the specification for SSL on the Internet. Recently, the company also published the source code to the reference implementation, called SSLRef, on the net. SSLRef is free for non-commercial use and is available for flat-fee licensing by companies who want to use it in commercial products.
"This widespread industry endorsement of SSL demonstrates that there is a practical and common industry approach to interoperable security on the Internet," said Marc Andreessen, vice president of technology at Netscape Communications. "SSL products and services from a broad range of companies make commerce on the Internet a reality."
The SSL protocol specification has been formally presented to the W3 Consortium (W3C) -- an organization founded to promote the development of technology for the evolution of the World Wide Web (WWW) -- for its consideration as an open security technology for the WWW. Netscape has also offered the SSL specification to the Internet Engineering Task Force for its consideration in open Internet security protocols. With these actions, Netscape reaffirms its commitment to the development of open security standards for the Internet.
Companies and organizations are supporting the SSL protocol in several ways. Apple Computer, Delphi Internet, Digital Equipment, MCI, Microsoft, Novell, Silicon Graphics and StarNine are all licensing SSL source code or providing SSL-enabled products. Bank of America, First Data Corporation, MasterCard, and Wells Fargo are working with Netscape to create online payment systems incorporating the SSL protocol. ConnectSoft, MarketNet and Open Market are among companies developing independent implementations of SSL from the protocol specification. More than 250 organizations and individuals have also downloaded SSLRef from the Internet for non-commercial use.
Incorporating RSA Data Security technology, SSL provides a straightforward method for adding strong security to existing applications and network infrastructures. SSL is application protocol-independent and provides encryption, which creates a secured channel to prevent others from tapping into the network; authentication, which uses certificates and digital signatures to verify the identity of parties in information exchanges and transactions; and message integrity, which ensures that messages cannot be altered en route.
"SSL provides the essential security mechanisms for commercial transactions on the Internet," said Taher Elgamal, author of the Elgamal digital signature algorithm, the basis for the Digital Signature Standard (DSS) for network security, and former director of engineering at RSA Data Security. "Applicable to the World Wide Web, existing TCP/IP protocols, and future TCP/IP applications, SSL provides a robust, efficient anddeployable solution to meet the security needs of individuals and organizations on the Internet today."
Netscape Communications' open software offerings include the Internet's first secure server, the Netscape Commerce Server, which incorporates the SSL protocol. When paired with Netscape Navigator or other Internet navigators supporting SSL, the Netscape Commerce Server lets users take advantage of such commercial services as online publications, financial services and interactive shopping. Netscape's products are based on existing Internet and WWW standards and will incorporate future standards as they are adopted.
Netscape is a founding member of the W3C and is a sponsoring member of CommerceNet, a non-profit consortium of organizations building an open, Internet-based infrastructure for electronic commerce in Silicon Valley.
Netscape Communications Corporation is a premier provider of open software to enable people and companies to exchange information and conduct commerce over the Internet and other global networks. The company was founded in April 1994 by Dr. James H. Clark, founder of Silicon Graphics, Inc., a Fortune 500 computer systems company; and Marc Andreessen, creator of the NCSA Mosaic research prototype for the Internet. Privately held, Netscape Communications Corporation is based in Mountain View, California.
Netscape Communications, Netscape Navigator, Netscape Commerce Server, and Netscape are trademarks of Netscape Communications Corporation. All other product names are trademarks of their respective companies.
"Apple Computer recognizes the importance of safety in using the Internet. The development of standards for safe and secure transmission, controlled access, and authentication will be critical if the Internet is to achieve its commercial potential. The development of SSL is a step in the right direction."
- Ike Nassi
Vice President, AppleSoft
Apple Computer, Inc.
"ConnectSoft is independently implementing and supporting the open specification for SSL to provide the security functionality in its E-Mail Connection and Internet Connection family of products. We chose to use SSL in our products because of its straightforward and effective design combined with its killer server support."
Mitchell London
President and CEO
ConnectSoft
"We feel Netscape's products offer our customers the best technology for secure transactions and secure data delivery. software.net is the original and leading electronic software distributor on the WWW today and SSL delivers the security we need to conduct business on the Internet."
Bill McKiernan
President
CyberSource Corporation
"Delphi Internet continues to aggressively move forward toward an open Internet-based architecture. In the tradition of the Internet, Netscape's innovation and openness provide technology that will help accelerate global electronic commerce. We will continue to work closely with Netscape to help establish open standards for Internet security."
Allan Baratz
Chief Executive Officer
Delphi Internet Services Corporation
"Digital's customers are embracing the Netscape products to address critical needs in the emerging electronic marketplace and to maintain a competitive edge over their competition. These customers are purchasing these products from Digital because they know Netscape and Digital are committed to open standards."
Mark Collett
Product Manager, Internet Business Group
Digital Equipment Corporation
"First Data Corporation is pleased to be working with Netscape to ensure that payment transactions are handled securely over the Internet. We're pleased that Netscape has made its SSL reference implementation available and we support its continuing efforts to promote open security standards for the Internet."
Scott Loftesness
Executive Vice President
First Data Corporation
"As the most popular shopping site on the net, we receive more than 250,000 accesses per day with more than 80% of them coming from Netscape browsers. Our customers demand the security that SSL offers and it has become an essential part of our business. In fact, since we installed the Netscape Commerce Server, we have more than doubled our daily membership rate."
Randy Adams
President, Internet Shopping Division
Home Shopping Network, Inc.
"IBM firmly believes in the need for open standards on the Internet and supports Netscape's efforts to make the Secure Sockets technology, SSL, openly available. In combination with SHTTP from CommerceNet, SSL can provide a robust environment for implementing secure electronic commerce on the Internet."
Pat Sueltz
Vice President
Platform Architecture and Business Development
Advantis, The IBM Global Network
"SSL is a well designed protocol that clearly is a straightforward way in which the Web can operate secure conversations. Furthermore, it can readily be adapted to allow secure news, ftp, telnet and any other conversations."
John Hemming
Chief Executive
MarketNet
"Open standards are critically important for the future of the Internet, and we support Netscape's efforts to make the SSL secure sockets layer technology openly available to everyone."
Ed Hogan
Senior Vice President
MasterCard International, Inc.
"MCI supports Netscape's efforts to introduce its SSL security technology into the Internet Standards efforts of the Internet Engineering Task Force. SSL and SHTTP are among several important emerging technologies for Internet security which can enable a broad range of applications for online commerce. MCI encourages Netscape and other contributors to work together in the Internet Standards process to achieve agreement on standards for securing Internet-based services."
Vinton G. Cerf
Senior Vice President
Data and Information Services Division
MCI Communications Corporation
"We see SSL as an important emerging security standard for the Internet and we will ensure that Microsoft customers will be able to interact with a wide range of secure web servers."
John Ludwig
General Manager, Windows Networking Division
Microsoft Corporation
"As a strong proponent of standards, Novell strongly supports efforts to help develop an open standard for secure communications on the Internet. Novell will continue to work closely with Netscape and other members of the W3 consortium to incorporate open specifications like SSL into formal standards."
Steve Tucker
General Manager
Advanced Access and Applications Group
Novell, Inc.
"Secure communication is an important facet of the business solutions provided by Open Market. Our support for the SSL protocol stems from our commitment that these solutions be accessible from the entire spectrum of secure browsers."
Bob Weinberger
Vice President
Open Market, Inc.
"SSL is a critical component to Internet security. Our customers have embraced these solutions for their commercial Internet enterprises and for the broad range of applications that they require. SSL also allows Silicon Graphics to develop and quickly deliver secure applications for the Internet."
Tom Furlong
Vice President and General Manager
Digital Sight and Sound Division
Silicon Graphics, Inc.
"StarNine is happy to be licensing SSLRef for inclusion with WebSTAR, our leading World Wide Web server based on MacHTTP. Privacy for Web sites is a one of the most important features our customers have requested and SSL provides complete security between WebSTAR and SSL-enabled browsers such as Netscape."
Chuck Shotten
StarNine Technologies, Inc.
"Sun recognizes the importance of standards for the growth of new markets. We see security standards as a key to making the Internet a viable commercial medium today. We fully support Netscape's opening of SSL through their proposal to the W3C and IETF and are committed to aggressively work with Netscape toensure the rapid adoption of appropriate security standards to further expand use of the Internet and the World Wide Web."
Andrew Barker
Product Line Manager
SunSoft, a subsidiary of Sun Microsystems, Inc.
"The products from Netscape Communications show me that Netscape understands the issues and the intended uses of the technology. That gave me confidence that SSL is intended to help me address the broad sweep of electronic security problems, not just the narrow issue of secure credit card transactions. Approximately 80% of our sessions use SSL encryption for the entire session. The performance costs are small and the confidence it engenders in purchasers is clear from the level of business we are getting."
Robert Olson
President
Virtual Vineyards
"Visa supports Netscape's approach of making SSL an open protocol . Open standards for transaction security will be a key enabler for the growth of the electronic commerce marketplace."
Carol Coye Benson
Senior Vice President
Visa International
"Wells Fargo is committed to providing customers access to their financial information through the Internet. Therefore, it is critically important that there are open security standards for the World Wide Web. We applaud and support Netscape Communications in its leadership in providing a secure environment for electronic commerce."
Dudley M. Nigg
Executive Vice President, Direct Distribution Group
Wells Fargo Bank
"As the W3 Consortium begins its operations, and various interested parties are anxious to see their efforts widely used, it is quite natural that some confusion and misquotes will find their way into the press. In this context, I am pleased that Netscape, in its role as a founding W3 Consortium member, is actively contributing its expertise to the definition of the new W3C security protocol."
Tim Berners-Lee
Director
W3 Consortium
Netscape Communications, the Netscape Communications logo, Netscape,
Netscape Commerce Server, Netscape Communications Server, Netscape Proxy
Server and Netscape News Server are trademarks of Netscape Communications
Corporation. NCSA Mosaic is a trademark of the University of Illinois.
All other product names are trademarks of their respective companies.