What is SSL? : The first component, and perhaps most widely known in relation to online commerce, is Secure Sockets Layer (“SSL”). SSL is a program layer originally created by Netscape for managing the security of message transmissions in a network. In plain English, SSL encrypts information traveling between a web browser and a web server. In this manner, even if some packets of the information submitted to the web server were to be intercepted (a fairly difficult and unlikely event in itself), the information is in an encrypted format, so any information intercepted will be unreadable by the interceptor. This SSL connection ensures that all data transmitted between the web server and web browser remain private and integral.
In order to establish an SSL connection between a web browser and a web server a SSL “Certificate” is required. SSL makes use of a digital ID or certificate installed on the web server with complementary pieces included in your SSL enabled browser. There are a number of Certificate Authorities (“CA”) who provide digital IDs. We have chosen GoDaddy as the CA for our website. The digital ID provides independent third party verification that a given business exists and is operating a secure website at the given URL. It also allows the web server and browser to negotiate up to 256-bit SSL encryption for secure information transfers over the network. How does it work? : When your browser connects to a secure website the browser will retrieve the site's SSL Certificate and check that: a) the SSL Certificate has not expired, b) it has been issued by a Certification Authority the browser trusts, and c) that it is being used by the actual website for which the Certificate has been issued. If it fails on any one of these checks the browser will display a warning to the end user (you). In addition to insuring that you are dealing with a fully validated business website, SSL allows full encryption of all data transfers to ensure that your information is protected at all times.
Because of the complexity of an SSL encrypted connection additional processing time on both the client (your web browser) and the website server is required. It would slow down your shopping experience if we SSL encrypted the entire store, therefore, SSL encryption is only activated when you click "Checkout" button. So, while you are shopping you may receive a warning when adding or modifying a cart item that the transmission is not secure, that is ok because no sensitive data is being transmitted. It is important to remember that the only information being transferred at this point is what item you are adding or modifying. There is obviously no need to incur the extra processing time of SSL until you are ready to actually submit sensitive information.
So, when you are ready to check out and click the "Checkout" button the connection then becomes a secure SSL encrypted connection. You should notice in the location window of your browser the http:// change to https://. You will also most likely see an image of a lock appear on the right side of the location window indicating that you are operating in the SSL secure mode. You may also notice other changes in your browser - depending on what browser and what version browser you are using.
Protection of Financial Information : To further protect the privacy and security of your financial information we use Authorize.net to process all payments. Authorize.net protects your financial information with industry-leading
security and fraud prevention systems. Authorize.Net is
committed to safeguarding customer information and combating fraud. Authorize.Net
implements industry leading security initiatives, and its merchants are protected by the strongest encryption methods and security protocols available. Authorize.Net continues to develop new solutions to provide its merchants and the merchant's customers (you) with confidence and security. For more details about Authorize.net, please visit their site at Authorize.net