A higher level protocol can layer on top of the SSL Protocol transparently. Privacy is guaranteed through encryption. Although information can still be intercepted by a third party, they will be unable to read them as they have no access to the encryption key. Integrity is also ensured through encryption. If information is received that will not decrypt properly then the recipient knows that the information has been tampered with during transmission.
Authentication is provided through digital certificates.
Digital certificates provide the basis for secure electronic transactions as they enable all participants in a transaction to quickly and easily verify the identity of the other participants. The SSL protocol uses a combination of public-key and symmetric key encryption. An SSL session always begins with an exchange of messages called the SSL handshake. The handshake allows the server to authenticate itself to the client using public-key techniques, then allows the client and the server to cooperate in the creation of symmetric keys used for rapid encryption, decryption, and tamper detection during the session that follows. Optionally, the handshake also allows the client to authenticate itself to the server.