Online auctions shopping discussion covers the protection of your Internet privacy from Internet cheats or impostors. However the encryption can not help if someone gets to control your PC or has access to your computer through one of the numerous security holes in the operating system and application software. The thing is that Internet Explorer leaves many traces of your Web surfing. These include Internet history, cookies, Temporary Internet files (a.k.a. Internet cache) and AutoComplete forms and passwords. If an intruder gets access to these traces, he can have a full record of all Web surfing and even some of your computer activities that are not related to Internet.
You can delete some of these traces through Internet Explorer options but not all of them are really deleted (see the article Delete Index.dat files for the most obscure and hard to erase traces). Furthermore, it is real pain to have to clean even these traces because there is no centralized place to control this and there is no way to automate the process. Finally, some of the traces are actually good for your browsing experience - Internet cache speeds up the browsing, cookies protect you from entering your user information over and over again and history makes it easy to type the addresses of your favorite Web sites.
Secure pages and secure connections
Everything that you enter in the online forms when you are shopping on online auctions, travels through many (tens or even hundreds) switching devices and computers. In order to be sure that no one can intercept this information, a special way of communication is used, called Secure Socket Layer (SSL). SSL ciphers (encrypts) the information on your computer and deciphers (decrypts) the information on the Web server that you are accessing. But how can you be sure that SSL is used when you are shopping online?
First, you have to look at the address bar of your browser and see what the address of the page where you enter your personal and credit card information looks like. If the address begins with https: (s for secure) instead of http:, then this page is using SSL. Note that only the page(s) where you actually enter your personal and credit card information need to be protected with SSL. All other pages on the Web site in most cases don't use SSL because they don't need to.
Digital certificates, cipher strength and Internet privacy
With SSL (the secure protocol described above) you can be sure that no one can intercept and decode the private information sent to the online auction or whatever web page you are accessing via secure connection. However, there is another danger - how can you be sure that the online shop itself is not a cheat or impostor?
To address this concern, when you visit the online store order page and you submit your personal data, the online store server automatically sends its digital certificate. This is essentially an electronic ID card that proves the online store identity to your browser, and verifies that it was issued by a certificate authority that your browser trusts. This certificate is issued to the online store by a trusted third party called a certificate authority. In addition to proving the online store identity, the certificate provides a cryptographic "key" (cipher) that is used to encode and decode your communication with the online store. Once your browser approves the certificate, the secure server encrypts any information before it travels across the Internet.
