A.2. General information on cryptography, SSL and HTTPS

SSL and TLS: Designing and Building Secure Systems, Eric Rescorla, Addison-Wesley 2001. ISBN: 0201615983. An extensive coverage of SSL and TLS as it applies to HTTPS and other protocols. Almost everything you could ever want to know about SSL can be found here, along with much that you probably did not want to know about.

Security Engineering, Ross Anderson, John Wiley and Sons Inc 2001;, ISBN 0471389226. An extensive coverage of security issues, including (but in no way limited to) computer security and cryptography.

Applied Cryptography, Bruce Schneier, John Wiley and Sons Inc; ISBN: 0471117099. The standard work on cryptographic algorithms.

Secrets and Lies, Bruce Schneier, John Wiley and Sons Inc; ISBN: 047125311. By the same author, reviewing computer security and the problems that occur when fallible humans start using otherwise "perfect" cryptography.

The mod_ssl Introduction to SSL, at http://www.modssl.org/docs/2.8/ssl_intro.html

The Apache 2 Apache SSL/TLS Encryption documentation, at http://httpd.apache.org/docs-2.2/ssl/

Introducing SSL and Certificates using SSLeay, Frederich Hirsch, at http://www.linuxsecurity.com/resource_files/cryptography/ssl-and-certificates.html.

Apache and Secure Transactions, at http://www.apacheweek.com/features/ssl

Introduction to SSL, at http://developer.netscape.com/docs/manuals/security/sslin/contents.htm

Extended Validation Certificate, at http://en.wikipedia.org/wiki/Extended_Validation_Certificate

Server Gated Cryptography in the file README.GlobalID included with the mod_ssl source.