What is Secure Sockets Layer(SSL)?
  Why do we require 128-bit SSL?
  What is 'HTTPS://'?
  How do I check my version and encryption strength?
  How do I update my browser, if necessary?
  Can you give me instructions to help me with the upgrade?

What is Secure Sockets Layer (SSL)?

Chunks of information (data) move around over the Internet in "envelopes" known as packets. A typical message is broken into multiple packets before being sent out across the Internet. Different individual packets may take different routes to reach their destination. When all the packets arrive at the destination computer, they are reassembled into the original message. It is possible for data packets to be intercepted by an unauthorized third party somewhere along the way between their source and destination. For most routine communications, it doesn't matter much if someone manages to intercept and read a few data packets. However, some pieces of information (for example personal information) need greater security protection. Secure Socket Layer (SSL) provides that protection by encrypting data as it is exchanged between computers.

SSL scrambles (or encrypts) data using a code (also referred to as a key) that is known only to the data's sender and recipient. The encrypted data is unreadable unless it is unscrambled using the correct key. Regardless of the path the data takes on the Internet, it remains secure because only the intended recipient has the key that will unlock the data. SSL technology is widely accepted and used in Web browsers and a variety of other Internet software.

The strength of the SSL encryption is based on the size of the key used to encrypt the data. The larger the key, the harder it is to crack the code. Most web browsers are equipped with 40-bit SSL encryption by default, or International Security. Online banking and similar applications within the United States have the option to use US Domestic Security, or SSL encryption with 128-bit keys (that's 2 raised to the 128th power).

Compare this to a briefcase that incorporates a lock with three combination wheels containing the numbers 0 through 9. It would take several hours to try each of the 1000 possible combination from 000 to 999 to discover the correct combination to unlock the briefcase. Now, imagine the time it would take to pick the lock of a briefcase that had a 128-bit lock. You could never fit 128 little wheels on a briefcase, but you could represent the same range of numbers with 32 wheels that each have 16 positions (the numbers 0 through 9, plus the letters A through F). The number of possible number combinations is astronomical; 309,485,009,821,345,068,724,781,056 to be exact. With such a large number, it is practically impossible for someone to decipher the key that protects the data.

The latest versions of Netscape Navigator and Microsoft Internet Explorer include support for 128-bit SSL encryption technology. Data vendors, such as banks, hospitals and online merchants, who want to implement secure Internet applications use this technology to seamlessly manage the entire SSL process. When your Web browser connects to a secure Web server using SSL, the browser displays a small padlock icon in the status bar at the bottom of the browser window. That way, you know when the data traveling back and forth between your browser and the vendor's Web site is being protected with SSL encryption.

Back to Top

Why do we require 128-bit SSL?

Palo Alto Medical Foundation uses the latest online security techniques to help ensure the security of your information. This security feature enables your web browser software to establish a secure session with Palo Alto Medical Foundation (and other SSL-protected web sites on the Internet) where all sensitive data exchanged between your computer and Palo Alto Medical Foundation is scrambled (encrypted) with the most powerful level of encryption tools available.

Back to Top

What is "HTTPS://"?

While you navigate secure information, note the URL (Universal Resource Locator) starts with 'HTTPS://' rather than 'HTTP://'.  The 'S' stands for secure.  Secure means encrypted.

Back to Top

Both Netscape and Microsoft offer two versions of their browsers - 128 bit and 40 bit. If you are using a browser that came with your machine, it has, at most, 40-bit encryption. The only way to get a browser with 128-bit encryption is to download it directly from Netscape or Microsoft.

Microsoft Browsers:

To check the security level on Internet Explorer, choose "Help" from the browser menu, and then select "About Internet Explorer" (see below).

This selection will bring up an information box with the encryption level listed under "Cipher Strength":

Netscape Browsers:

To check the security level on Netscape Navigator, choose "Help" from the browser menu, and then select "About Navigator" (see below).

This selection will bring up a Netscape information page. Look for the logo shown below. The line which says "This version supports high-grade security" indicates you have 128 bit encryption. If this line says "This version supports International security", you have 40 bit encryption.

VeriSign Browser Check:

If you can't locate the browser and cipher information from the instructions above, click here to check what browser version and encryption level you are currently using. Follow the instructions to complete the test…

Back to Top

Updating your web browser software to meet the security requirements for the Palo Alto Medical Foundation is easier than you might think. Both Microsoft Internet Explorer and Netscape Communicator with Navigator are available free of charge and both of these popular browsers are capable of utilizing 128-bit SSL encryption. You may not have strong encryption, even if you have downloaded the most recent version of browser software. You may be able to simply add the 128-bit SSL security upgrade to your existing software. Depending on the software you have installed and your preference, your upgrade method will differ:

Click on the following connections for quick access to the web browser software download areas.