If you choose to pay with your credit card, you will be taken to a SSL secure payment system. In fact, once your order is confirmed, the data of your credit card will be transferred through a secure, encrypted SSL connection (Secure Socket Layer) of Banca Sella S.p.A in order to authorize and debit the card. UNDER NO CIRCUMSTANCES WE WILL RECEIVE THE NUMBER OF YOUR CREDIT CARD. We will only receive the authorization supplied by the credit card issuer. This procedure is completely safe and it protects both the buyer and the merchant completely.
The SSL encrypted system guarantees that nobody could, in some way or another, read the information sent through Internet.
Additional information about the SSL payment:
SSL (Secure Sockets Layer) is a standard industrial protocol used in order to
establish safe communications between a Web Server (or some other servers which offer an information service)
and a client. The SSL protocol is a double layer protocol. The lower layer (or level) – the SSL Protocol
Record - works immediately above the Transport Control Protocol (TCP). It encapsulates protocols from a higher level
by creating a flexible and independent safety scheme with respect to the application protocol. The highest layer,
the SSL Handshake Protocol, is used to coordinate a coding algorithm which must be used between a client and a
server in order to guarantee a safe communication. In order to establish a SSL connection, the following steps
are required:
The client starts the communication by requesting a server resource. The request has the following form: https://
The server replies to inform that it has received the request by a safe resource.
The server sends its certificate to the client
If necessary, the server asks for the client certificate
The server indicates that its transmission is complete
The client answers by sending its certificate to the server, if the server has demanded the client certificate.
The client tries to verify the certificate of the server trough the public key distributed by the certifying authority.
If it verifies it, the client sends the requested coding details to the server. This is the so-called ‘session key’, which is encrypted with the private key of the client
The client indicates that the transmission is successful
The server verifies the validity of the certificate of the client, if this is requested.
The server receives the session key, then it deciphers it with the public key of the client and then modifies its own coding so that it corresponds to that request from the client.
The server shows the end of the normal transmissions.
This process will fail if the client or the server do not succeed to reply to some requests for information, or if an answer indicates that the information, the data or the requested certificate are not available. The communication link is interrupted even if the certificates of the server or of the client cannot be validated, or if the server is not in a position to comply with the coding requirement of the client. The certificates are used in order to establish a safe communication between the client and the server, in order to verify the identity of one or both parts and in order to make the session key safe. The coding technology defined by the session key, not the certificate, rules the coding of the data between the client and server, once that the SSL link has been established. The session key is the key used by the client and by the server in order to encode all the transmitted data. The session key can have an enforcement range based on its coding level. The coding levels are measured in bit: if the session key is longer, the coding key is safer. A 40 bit coding key is a normal coding key: 40 bits is the maximum length allowed for the communications outside of the USA, while in the USA it is possible to use a coding key of 128 bits or longer. The strength, i.e., the length of the coding key affects also the performances of the communications: if the key is longer, the coding/decoding process becomes more complicated. For every bit which is added to the key, its effectiveness and the required resources for processing are doubled.