Most Web applications are vulnerable to attack.
The most important weapons in keeping sites safe from attack are awareness and understanding. The obvious way to prevent eavesdropping is encrypting the connection between a site and its visitors. Figure 1 shows these protocols listed under the Advanced tab of the Internet Options dialog in Microsoft Internet Explorer. To establish a secure connection, the browser first asks the Web server for its digital certificate , which provides proof of its identity. When asking the Web server for its digital certificate, the browser also sends along a list of supported encryption algorithms.