Basic ConceptsDell 7330 Mono Laser Printer System Administrator Guide4-3About HTTP, HTTPS, and SSL/TLSHTTP (Hyper Text Transfer Protocol) is the protocol used to communicate across the Internetbetween the printer web server and the web browser (clients). Because the data is transmittedin plain text and passwords are only slightly encrypted, it is not secure; the data can be read orintercepted by other people.HTTPS (Secure Hyper Text Transfer Protocol) is a secure version of HTTP. HTTPS providesauthentication and encrypted communication to preserve the confidentiality of your data.Instead of using plain text, HTTPS uses either the SSL (Secure Socket Layer) protocol or theTLS (Transport Layer Security) protocol to encrypt data, thus ensuring reasonable protectionfrom eavesdroppers and man-in-the-middle attacks.Before using HTTPS, you must set up a certificate and select when to use SSL to encrypt data.You can set the printer to use SSL either to secure web pages that use passwords or to secureall web pages.See also:About Certificates on page 4-3Managing Certificates on page 4-6Configuring SSL on page 4-7About CertificatesA certificate is an electronic message containing information about the printer and a digitalsignature.Before configuring passwords, set up a certificate and then configure SSL to encrypt data,including passwords, for maximum security. You can set up a self-signed certificate ordownload a root-signed certificate, depending on your requirements.Device Certificates:A device certificate is stored in the printer and is used to validate the identity of the printer toclients and network servers and to allow encrypted communication. If you do not install adevice certificate signed by a Certificate Authority (CA), a default self-signed devicecertificate is automatically established on the printer when it is needed. A CA signed devicecertificate is needed to log into the network when using 802.1X EAP authentication with TLS.Self-Signed CertificatesSetting up a self-signed certificate is a quick and easy way to establish a certificate on theprinter. The printer automatically generates a default self-signed certificate when the printer isturned on for the first time. To modify the certificate so it is specific to your printer, use theEWS to enter information about the location of the printer.While self-signed certificates are safe for most applications and allow data encryption, they donot ensure valid authentication. Self-signed certificates are not necessarily secure because thecertificate owner is only confirming his own identify instead of verification by a trusted thirdparty. Although self-signed certificates encrypt the data that is exchanged, they do not preventman-in-the-middle attacks.