Cryptography, SSL & Certificates

When AS Java runs SSL through an intermediary server placed in the DMZ, which intermediary products does it officially support?

With an intermediary server in front of AS Java, what is the difference between end-to-end and terminated SSL?

What does SSL mutual authentication add over plain server authentication, and why does that enable Single Sign-On?

Asymmetric encryption solves key distribution, so why does SSL not simply use it for all traffic?

Walk through how a client and the AS Java agree on the secret key that will encrypt their session in hybrid encryption.

Encryption stops eavesdropping, but what attack still remains against a communication partner, and what is the basis for defeating it?

What everyday object is a digital certificate compared to, and which standard defines its format?

Which part of a key pair does a digital certificate contain, and what does the Certification Authority actually vouch for by signing it?

Besides commercial CAs, how can an SAP customer obtain digitally signed certificates from SAP itself?

A server presents a certificate signed by a CA. What must the client already possess to actually trust it, and what happens if it does not?

What cryptographic software must be in place for AS Java to support SSL/HTTPS, and how does the requirement differ between 7.1x and 7.3?

Why does sensitive data sent over TCP/IP have to be encrypted at the application level rather than trusting the network to protect it?

What defines symmetric key encryption, and what is its main operational weakness?

Where does SSL sit in the protocol stack, and what does that positioning let it do for protocols like SMTP or LDAP?

Beyond encrypting data, which three authentication mechanisms does SSL provide, and what encryption method underlies it?

In asymmetric encryption, which key decrypts a message that was encrypted with the public key, and which key may be freely distributed?