Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 2 down vote favorite

ALL

I already know the basic concept like public key and private key, the message encrypted by public key can be decrypted by private key, and vice versa, but I just can't understand how client know the requested server is the right one. And I want to know the detail of the process..

thanks.

share|improve this question

1 Answer

up vote 3 down vote accepted

The client compares the server hostname you type into the URL against the subject name in the certificate. If they match, then it's the right server. If they don't match, then it's the wrong server. That simple.

See: How does SSL work?

share|improve this answer
Yes, Subject Alternate Name, I know. Best not to add to the confusion, I say. – tylerl Jan 30 at 9:18
Actually, It's CN (common name) SAN's are the alternate names (aliases if you will) that the certificate will also resolve to. – k1DBLITZ Jan 30 at 15:47

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.