{"id":3096,"date":"2023-05-23T09:52:44","date_gmt":"2023-05-23T07:52:44","guid":{"rendered":"https:\/\/neuroom.net\/security\/"},"modified":"2026-09-30T12:18:06","modified_gmt":"2026-09-30T10:18:06","slug":"security","status":"publish","type":"page","link":"https:\/\/neuroom.net\/en\/things-to-know\/security\/","title":{"rendered":"Secu\u00adrity"},"content":{"rendered":"<p>[et_pb_section fb_built=\u201c1\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cd0154822-e1c4-40a0-be1a-b17219f0ec7c\u201d background_image=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/fly-d-jKKhgGKqmok-unsplash-Kopie2-scaled.jpg\u201d global_colors_info=\u201d{}\u201d][et_pb_row _builder_version=\u201c4.20.2\u201d _module_preset=\u201cdefault\u201d positioning=\u201cabsolute\u201d position_origin_a=\u201cbottom_center\u201d vertical_offset=\u201c60px\u201d vertical_offset_tablet=\u201c0px\u201d vertical_offset_phone=\u201c0px\u201d vertical_offset_last_edited=\u201con|tablet\u201d custom_padding=\u201c15px||15px||true|false\u201d global_module=\u201c804\u201d saved_tabs=\u201call\u201d collapsed=\u201coff\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d text_orientation=\u201ccenter\u201d background_layout=\u201cdark\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<span><span><a href=\"https:\/\/neuroom.net\/en\/start\/\">Home<\/a><\/span><\/span>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=\u201c1\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201ccb39a8ce-2c80-4e86-bf4b-8670f824fae1\u201d global_colors_info=\u201d{}\u201d][et_pb_row _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d width=\u201c100%\u201d custom_padding=\u201d|15px||15px|false|true\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d text_orientation=\u201ccenter\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<h1>Secu\u00adrity<\/h1>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=\u201c1\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_row column_structure=\u201c3_4,1_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c3_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d text_text_color=\u201c#000000\u201d background_color=\u201cRGBA(255,255,255,0)\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<h2 class=\"ql-heading\" data-block-id=\"block-131c9363-6ad1-4ca0-aa10-ee04947116fc\">Intro\u00adduc\u00adtion<\/h2>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<p>This article is not speci\u00adfi\u00adcally about secu\u00adrity in NeuroomNet, but, since NeuroomNet is a web-based tool, about the secu\u00adrity of web-based tools in general. In other words, what you should consider opera\u00adting a system like NeuroomNet secu\u00adrely. We are happy to help you with any ques\u00adtions you may have, but you can get some ideas below about what to consider.<\/p>\n<\/div>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u201c1_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f9041250f35a0002330cfce.jpeg\u201d alt=\u201cSecurity issue: Shadow of hand opening a door that is not locked\u201d title_text=\u201cSecurity issue\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d border_radii=\u201con|10px|10px|10px|10px\u201d box_shadow_style=\u201cpreset1\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<p>Secu\u00adrity is a double-edged sword: If the secu\u00adrity is too high, the autho\u00adrized user is so massi\u00advely hindered in the tasks that accep\u00adtance suffers signi\u00adfi\u00adcantly. But if it is too low, this can lead to very serious conse\u00adquences.<br>In this respect, the internet is once again both a curse and a bles\u00adsing.<br>The disse\u00admi\u00adna\u00adtion of know\u00adledge is a great strength, but with it, the know\u00adledge of how to under\u00admine a system\u2019s secu\u00adrity is also quickly spread. Just as the connec\u00adtion to the internet itself creates the possibility of being able to conve\u00adni\u00adently attack a system. On the other hand, certain subsys\u00adtems can be auto\u00adma\u00adti\u00adcally kept up to date via the internet and protected from harmful influences.<br>So if you want to be on the safe side, you have to move with the times and adapt your system to the constantly incre\u00adasing requi\u00adre\u00adments. There are areas where you can take a brea\u00adther because the concept already provides a great deal of secu\u00adrity. Other areas adapt auto\u00adma\u00adti\u00adcally (if there is access to the internet) and finally, there are areas where you have to regu\u00adlarly check whether ever\u00ady\u00adthing is working as intended or react appro\u00adpria\u00adtely.<\/p>\n<\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Encryp\u00adtion<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">A very successful and long-lasting method is to encrypt the commu\u00adni\u00adca\u00adtion between two parties. This means that an atta\u00adcker can neither draw conclu\u00adsions nor get hold of the actual data. Anyone who wants to read this data has to make an enormous effort and has a much easier time, for example, at the end points of the commu\u00adni\u00adca\u00adtion, i.e. before it is encrypted\/decrypted. Because modern encryp\u00adtion still cannot be cracked in short periods. This means that data can then also be trans\u00admitted via connec\u00adtions that run over the internet, WLAN, mobile radio, or other publicly visible networks without a guilty consci\u00adence. And thanks to sophisti\u00adcated mecha\u00adnisms for estab\u00adli\u00adshing the encryp\u00adtion, the user does not even notice this in the best case and is not disturbed by the daily routine. Except when a time limit for rene\u00adwing a secure connec\u00adtion has expired. Because one aspect of secure commu\u00adni\u00adca\u00adtion is to renew the under\u00adlying keys so that the lengthy attacks remain unsuc\u00adcessful.<\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Fire\u00adwall<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">Another aspect of a long-lasting secu\u00adrity concept is the protec\u00adtion of endpoints by fire\u00adwalls. A fire\u00adwall is a secu\u00adrity system that protects a computer network and individual compu\u00adters from unwanted network access. In short, a modern system must be able to handle encrypted commu\u00adni\u00adca\u00adtion and protected networks. If the front door and windows in your house were the fire\u00adwall, then the safe where you store your most valuable things would be the encryp\u00adtion.<\/div>\n<p>[\/et_pb_text][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f9040b00f35a0002330cfcc.png\u201d alt=\u201cSecurity Icons: Locked screen, Key, Fire\u00adwall, Main\u00adten\u00adance, Thumbs up\u201d title_text=\u201cSecurity Icons\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Infra\u00adstruc\u00adture<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">A prere\u00adqui\u00adsite for encryp\u00adtion is the possibility of secu\u00adrely sending the keys to legi\u00adti\u00admate parti\u00adci\u00adpants and regu\u00adlarly updating them. This is done with the help of so-called certificates. A certi\u00adfi\u00adcate can use a signa\u00adture to make it credible by whom, for whom, and until when it was issued. A distinc\u00adtion is made between whether a certi\u00adfi\u00adcate must be publicly acces\u00adsible or whether it is used within a closed system. The under\u00adlying tech\u00adno\u00adlogy, and thus the secu\u00adrity, is iden\u00adtical for both vari\u00adants.<\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u201c1_2,1_2\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Public appli\u00adca\u00adtion (CA-signed certificates)<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">For public appli\u00adca\u00adtions with publicly acces\u00adsible certificates, specia\u00adlized compa\u00adnies are used. These only issue certificates through veri\u00adfied appli\u00adca\u00adtions that are subject to a fee. Such a certi\u00adfi\u00adcate can then be used for a certain period to secure one\u2019s systems and does not require any special prepa\u00adra\u00adtion on the compu\u00adters that already know the issuer.<br>The dura\u00adtion of such a certi\u00adfi\u00adcate is curr\u00adently limited to 2 years and is even to be shor\u00adtened to 13 months.<\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f96d23f9c2d9e0023a9fc3a\u20111.png\u201d alt=\u201cBrowser message: This Connec\u00adtion is Untrusted\u201d title_text=\u201cBrowser message: This Connec\u00adtion is Untrusted\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d border_radii=\u201con|10px|10px|10px|10px\u201d box_shadow_style=\u201cpreset1\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u201c1_2,1_2\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Internal appli\u00adca\u00adtion (self-signed certificates)<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">For internal appli\u00adca\u00adtions, a self-issued certi\u00adfi\u00adcate can be used. When issuing these certificates, certain limits can be exceeded to reduce the frequency of admi\u00adnis\u00adtra\u00adtive work. For such internal appli\u00adca\u00adtions, however, an admi\u00adnis\u00adtra\u00adtion of these certificates must first be estab\u00adlished and the issuer must be made known to the parti\u00adci\u00adpants. This enables the users (or compu\u00adters) to check whether a certi\u00adfi\u00adcate is (still) valid or to be provided with a new certi\u00adfi\u00adcate. Often both certi\u00adfi\u00adca\u00adtion systems (internal and external) are used to keep the effort for the users as low as possible or because it is tech\u00adni\u00adcally neces\u00adsary.<\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f9828579c2d9e0023a9fc4e\u20111.png\u201d alt=\u201cBrowser message: This is not a secure connec\u00adtion\u201d title_text=\u201cBrowser message: This is not a secure connec\u00adtion\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d box_shadow_style=\u201cpreset1\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u201c1_2,1_2\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Costs and bene\u00adfits<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">In prin\u00adciple, ever\u00ady\u00adthing could be handled by public certi\u00adfi\u00adca\u00adtion autho\u00adri\u00adties, but this would cause more costs. It would also be possible to handle ever\u00ady\u00adthing with internal certi\u00adfi\u00adca\u00adtion autho\u00adri\u00adties, but this would cause higher costs for the distri\u00adbu\u00adtion of the certificates in the public space. Apart from that, instal\u00adling the internal certificates would be an additional effort for the users. Accep\u00adtance would quickly drop to zero.<\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f903cdf0f35a0002330cfc8\u20111.png\u201d alt=\u201cTabular compa\u00adrison: Public-signed certificates, self-signed certificates, without a certi\u00adfi\u00adcate\u201d title_text=\u201cTabular compa\u00adrison: Public-signed certificates, self-signed certificates, without a certi\u00adfi\u00adcate\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d border_radii=\u201con|10px|10px|10px|10px\u201d box_shadow_style=\u201cpreset1\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#3C92CA\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_layout=\u201cdark\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<h5>Conclu\u00adsion<\/h5>\n<p><\/p>\n<p>To ensure that ever\u00ady\u00adthing func\u00adtions as smoothly as possible, a so-called PKI (private key infra\u00adstruc\u00adture) must be estab\u00adlished. This helps with admi\u00adnis\u00adtra\u00adtion and control and can auto\u00admate individual aspects. There are diffe\u00adrences due to the manu\u00adfac\u00adtu\u00adrers used in each case. It also requires appro\u00adpria\u00adtely trained staff to set it all up and renew it every few years or months, as described above. The regular instal\u00adla\u00adtion of renewed certificates must be ensured, as they cannot replace them\u00adselves.<br>The more complex a system becomes, the greater the need to set up a sepa\u00adrate certi\u00adfi\u00adca\u00adtion autho\u00adrity and PKI. The days of \u201cwe just plug ever\u00ady\u00adthing into the network switch\u201d are over, because other\u00adwise anyone can connect to the connec\u00adtion, read ever\u00ady\u00adthing along with the login data, and even mani\u00adpu\u00adlate it during use (see also man-in-the-middle attack).<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">Today, it is impos\u00adsible to imagine networks such as the Internet (World Wide Web) and intra\u00adnets (local networks\/WLAN) without <strong>secu\u00adring data connec\u00adtions<\/strong>. Almost ever\u00adyone has heard the names of the proto\u00adcols used for protec\u00adtion. Nevert\u00adheless, it is probably not clear to ever\u00adyone what the diffe\u00adrence is between SSL, TLS, and HTTPS and what secu\u00adrity proper\u00adties these proto\u00adcols have.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#3C92CA\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_layout=\u201cdark\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<h5>Why is a secured data connec\u00adtion useful?<\/h5>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">Let\u2019s assume a user wants to control an exhibit in NeuroomNet. When using a secured connec\u00adtion, this user bene\u00adfits from the secu\u00adrity features of encrypted and secured commu\u00adni\u00adca\u00adtion. Without encryp\u00adtion, data that is trans\u00admitted can be read as plain text by anyone who has access to the corre\u00adspon\u00adding network. With the incre\u00adasing spread of open (i.e. unen\u00adcrypted) WLANs, the importance of HTTPS is growing because it allows content to be encrypted regard\u00adless of the network used. Encryp\u00adtion makes it impos\u00adsible for third parties to see, among other things, exactly which pages of a website have been visited.<br>By using certificates, it can be ensured that no mani\u00adpu\u00adla\u00adtion of the content by third parties is possible during trans\u00admis\u00adsion and, for example, that no false information about your company is injected into your company website.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>The most important proto\u00adcols for secu\u00adring data connec\u00adtions for opera\u00adtors of websites and web appli\u00adca\u00adtions<\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\"><strong>SSL short for Secure Sockets Layer<\/strong>, was desi\u00adgned by Netscape and first released toge\u00adther with HTTPS in 1994 with their browser. Deve\u00adlo\u00adp\u00adment continued until version 3.0. Today, vulnerabi\u00adli\u00adties in SSL are known and the protocol should ther\u00ade\u00adfore no longer be used.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<p><strong>TLS stands for Trans\u00adport Layer Secu\u00adrity<\/strong> and is the successor protocol to SSL 3.0. The first version 1.0 of TLS is a slightly modi\u00adfied variant of the third version of SSL and was stan\u00addar\u00addized by the IETF.<\/p>\n<p>The <strong>Internet Engi\u00adnee\u00adring Task Force (IETF)<\/strong> is an orga\u00adniza\u00adtion that deals with the technical deve\u00adlo\u00adp\u00adment of the Internet to improve its func\u00adtio\u00adning. Curr\u00adently, TLS is in version 1.3 and is now also in wide\u00adspread use.<br>TLS consists of two main compon\u00adents: TLS Hand\u00adshake and TLS Record. In TLS Hand\u00adshake, secure key exch\u00adange and authen\u00adti\u00adca\u00adtion take place. TLS Record then uses the symme\u00adtric key nego\u00adtiated in TLS Hand\u00adshake for secure data trans\u00admis\u00adsion \u2014 the data is encrypted and trans\u00admitted with a MAC protected against changes.<\/p>\n<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\"><strong>MAC stands for Message Authen\u00adti\u00adca\u00adtion Code<\/strong> and is used to obtain certainty about the origin of data or messages and to verify their inte\u00adgrity. MAC algo\u00adrithms require two input para\u00adme\u00adters, firstly the data to be protected and secondly a secret key, and calcu\u00adlate a checksum from both, the Message Authen\u00adti\u00adca\u00adtion Code.<br><em>Note<\/em>: SSL is the more common term nowa\u00addays and often TLS is meant when talking about SSL.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u201c3_5,2_5\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||0px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c3_5\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\"><strong>HTTPS stands for Hyper\u00adtext Transfer Protocol Secure<\/strong> and is a commu\u00adni\u00adca\u00adtion protocol in the network with which data can be trans\u00admitted in a tap-proof manner. It repres\u00adents trans\u00adport encryp\u00adtion.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u201c2_5\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f98444d9c2d9e0023a9fc51.png\u201d alt=\u201cDisplay in browser: veri\u00adfi\u00adca\u00adtion source\u201d title_text=\u201cDisplay in browser: veri\u00adfi\u00adca\u00adtion source\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d box_shadow_style=\u201cpreset1\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d-15px||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">HTTPS is used to estab\u00adlish confi\u00adden\u00adtia\u00adlity and inte\u00adgrity in the commu\u00adni\u00adca\u00adtion between the NeuroomNet server and the web browser (client) in the network. HTTPS refers to the use of HTTP via SSL (TLS). The use of HTTPS can be reco\u00adgnized in the browser by the fact that the visited Internet address is preceded by https instead of http. In addi\u00adtion, most modern brow\u00adsers high\u00adlight a secure connec\u00adtion visually.<br>A secure connec\u00adtion is often equated with encryp\u00adtion of the connec\u00adtion. However, SSL\/TLS offers additional secu\u00adrity features. <br>Accor\u00adding to the original inter\u00adpre\u00adta\u00adtion, the client browser should first display the certi\u00adfi\u00adcate to the user after selec\u00adting the HTTPS address. The user then decides whether he trusts the certi\u00adfi\u00adcate for this session, possibly saving it perma\u00adnently, if neces\u00adsary after checking it via the speci\u00adfied links. Other\u00adwise, the HTTPS connec\u00adtion is not estab\u00adlished (\u201cLeave this page\u201d with Firefox or \u201cClick here to leave this page.\u201d with Internet Explorer).<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<p class=\"ql-block\" style=\"text-align: left;\" data-block-id=\"block-70ee0321-6222-4e44-9442-b47acb17a2d5\">The three main purposes when using SSL\/TLS are:<\/p>\n<ul style=\"text-align: left;\">\n<li class=\"ql-block\" data-block-id=\"block-70ee0321-6222-4e44-9442-b47acb17a2d5\"><strong>Confi\u00adden\u00adtia\u00adlity (through encryp\u00adtion)<\/strong><\/li>\n<li class=\"ql-block\" data-block-id=\"block-70ee0321-6222-4e44-9442-b47acb17a2d5\"><strong>Data inte\u00adgrity<\/strong><\/li>\n<li class=\"ql-block\" data-block-id=\"block-70ee0321-6222-4e44-9442-b47acb17a2d5\"><strong>Authen\u00adti\u00adcity<\/strong><\/li>\n<\/ul>\n<p style=\"text-align: left;\">These three purposes are explained below.<\/p>\n<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\"><strong>Confi\u00adden\u00adtia\u00adlity<\/strong> is ensured by encryp\u00adting the connec\u00adtion. This guaran\u00adtees the user that their access data and, for example, control information cannot be inter\u00adcepted and misused by third parties. Like\u00adwise, it protects all your data in NeuroomNet and thus also forms the basis for compli\u00adance with the Euro\u00adpean DSGVO.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">By guaran\u00adte\u00adeing the <strong>inte\u00adgrity of the data<\/strong>, it is guaran\u00adteed that mani\u00adpu\u00adla\u00adtion of the control system is not possible. The user would probably not be very happy if, instead of a switch-on command, for example, a delete command was issued, and in such a case the museum would be annoyed about the costs and the effort required for reco\u00advery. It is even more unplea\u00adsant if someone else could take over the entire control system and thus cause great or even exis\u00adten\u00adti\u00adally threa\u00adtening damage.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\"><strong>Authen\u00adti\u00adcity<\/strong> means that the iden\u00adtity of the museum operator is veri\u00adfiable for the user. By ensu\u00adring the iden\u00adtity of the museum, the user knows exactly who they are commu\u00adni\u00adca\u00adting with. Crimi\u00adnals can exploit a lack of authen\u00adti\u00adcity, for example, by regis\u00adtering domain names that are very similar to a muse\u00adum\u2019s domain and provi\u00adding a copy of the control under these domains. The poten\u00adtial customer can now be lured to the fake site via a phis\u00adhing email and, if the website is not secured, cannot directly see whether he has landed at the right museum. He may enter his access data and someone else can now go to the right museum unhin\u00addered.<br>Authen\u00adti\u00adca\u00adtion is used so that both sides of the connec\u00adtion can check the iden\u00adtity of the connec\u00adtion partner when estab\u00adli\u00adshing the commu\u00adni\u00adca\u00adtion.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Secured connec\u00adtions in prac\u00adtice<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">\n<p>An SSL\/TLS certi\u00adfi\u00adcate is required to estab\u00adlish a secure connec\u00adtion. Among other things, the issuer of the certi\u00adfi\u00adcate, the certi\u00adfi\u00adcate holder, and the public key of the certi\u00adfi\u00adcate holder are stored in a certi\u00adfi\u00adcate. Certificates are stored on the server with which a secure connec\u00adtion is to be estab\u00adlished later. To ensure the inte\u00adgrity of a certi\u00adfi\u00adcate, it is signed.<br>A secu\u00adrity certi\u00adfi\u00adcate can be gene\u00adrated and signed by anyone. However, self-signed certificates are not authentic to third parties because no inde\u00adpen\u00addent insti\u00adtu\u00adtion has veri\u00adfied the iden\u00adtity of the issuer. Most brow\u00adsers, ther\u00ade\u00adfore, display a warning message for websites with self-signed certificates. To verify the authen\u00adti\u00adcity of a website or web appli\u00adca\u00adtion, a chain of trust is formed between the end user\u2019s browser and the server of the visited website. The browser and opera\u00adting system manu\u00adfac\u00adtu\u00adrers verify and trust selected orga\u00adniza\u00adtions whose certificates are then stored in the browser or opera\u00adting system. These orga\u00adniza\u00adtions are also called certi\u00adfi\u00adcate autho\u00adri\u00adties. The certi\u00adfi\u00adca\u00adtion autho\u00adri\u00adties can verify the iden\u00adtity of third parties and sign their certificates after veri\u00adfi\u00adca\u00adtion. To ensure that a minimum stan\u00addard is main\u00adtained during veri\u00adfi\u00adca\u00adtion, the orga\u00adniza\u00adtions clas\u00adsi\u00adfied as trust\u00adworthy go through a certi\u00adfi\u00adca\u00adtion process before\u00adhand. Visitors to a website or users of a web appli\u00adca\u00adtion are then asked to verify that the chain of trust is intact.<br>There are various levels for veri\u00adfying iden\u00adtity, which differ in the extent of the veri\u00adfi\u00adca\u00adtion. At the lowest level (class 1), only it is checked whether the appli\u00adcant has the domain noted in the certi\u00adfi\u00adcate. For class 2 certificates, the iden\u00adtity of the appli\u00adcant (individual or company) is veri\u00adfied in more detail, for example with copies of identification docu\u00adments and company docu\u00adments. For class 3 certificates, the veri\u00adfi\u00adca\u00adtion is even more inten\u00adsive and additional docu\u00adments are required. Class 3 certificates are also referred to as extended vali\u00adda\u00adtion certificates and are charac\u00adte\u00adrized, among other things, by the fact that their use in modern brow\u00adsers is clearly high\u00adlighted.<\/p>\n<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Recom\u00admen\u00adda\u00adtions for the use of HTTPS<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">When trans\u00admit\u00adting sensi\u00adtive data, the use of an SSL\/TLS certi\u00adfi\u00adcate signed by a certi\u00adfi\u00adca\u00adtion autho\u00adrity is always manda\u00adtory. If only a personal login area is to be protected, a self-signed certi\u00adfi\u00adcate or a certi\u00adfi\u00adcate signed by the hosting provider may be suffi\u00adcient. In the case of self-signed certificates, however, the issuing certi\u00adfi\u00adca\u00adtion autho\u00adrity must also be stored as trust\u00adworthy for the client so that the browser does not issue warning messages. These settings can be made by IT experts. Setting up a network-wide PKI struc\u00adture is possible under both Linux and Windows. If there is no suitable IT expert\/administrator on site, NeuroomNet can also arrange suitable experts and even take over the main\u00adten\u00adance. If neces\u00adsary, these experts clarify the neces\u00adsary docu\u00adments for obtai\u00adning external certificates and then also set them up. Internal certificates can have very long terms, while external certificates have to be renewed after just one year.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Notes on authen\u00adti\u00adcity<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">In theory, authen\u00adti\u00adcity is given when using SSL\/TLS certificates, but in prac\u00adtice, there are problems with authen\u00adti\u00adcity and whether one can trust the iden\u00adtity of the operator of a website must be decided on a case-by-case basis. On the one hand, Level 1 certificates are usually issued auto\u00adma\u00adti\u00adcally. This means that valid certificates can also be acquired for typo domains, which are often used for phis\u00adhing attacks. On the other hand, authen\u00adti\u00adcity stands and falls with trust in the work of the certi\u00adfi\u00adca\u00adtion autho\u00adri\u00adties. If there is only one certi\u00adfi\u00adca\u00adtion autho\u00adrity that works care\u00adlessly when checking the authen\u00adti\u00adcity of the appli\u00adcant\u2019s docu\u00adments or ignores simi\u00adla\u00adri\u00adties in names with other compa\u00adnies, it is possible for crimi\u00adnals to have certificates signed for compa\u00adnies with which they have nothing to do.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Certi\u00adfi\u00adcate<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">An SSL\/TLS certi\u00adfi\u00adcate is required to build up a secure connec\u00adtion. Among other things, the issuer of the certi\u00adfi\u00adcate, the certi\u00adfi\u00adcate holder, and the public key of the certi\u00adfi\u00adcate holder are stored in a certi\u00adfi\u00adcate. Certificates are stored on the server with which a secure connec\u00adtion is to be estab\u00adlished later. To ensure the inte\u00adgrity of a certi\u00adfi\u00adcate, it is signed.<br>A secu\u00adrity certi\u00adfi\u00adcate can be gene\u00adrated and signed by anyone. However, self-signed certificates are not authentic for third parties because no inde\u00adpen\u00addent insti\u00adtu\u00adtion has veri\u00adfied the iden\u00adtity of the issuer. Most brow\u00adsers, ther\u00ade\u00adfore, display a warning message for websites with self-signed certificates. To verify the authen\u00adti\u00adcity of a website or web appli\u00adca\u00adtion, a chain of trust is formed between the end user\u2019s browser and the server of the visited website. The browser and opera\u00adting system manu\u00adfac\u00adtu\u00adrers verify and trust selected orga\u00adniza\u00adtions whose certificates are then stored in the browser or opera\u00adting system. These orga\u00adniza\u00adtions are also called certi\u00adfi\u00adca\u00adtion autho\u00adri\u00adties. The certi\u00adfi\u00adca\u00adtion autho\u00adri\u00adties can verify the iden\u00adtity of third parties and sign their certificates after veri\u00adfi\u00adca\u00adtion. To ensure that a minimum stan\u00addard is main\u00adtained during the veri\u00adfi\u00adca\u00adtion, the orga\u00adniza\u00adtions clas\u00adsi\u00adfied as trust\u00adworthy first undergo a certi\u00adfi\u00adca\u00adtion process. The visitor of a website or user of a web appli\u00adca\u00adtion is finally checked whether the chain of trust is intact.<br>There are diffe\u00adrent levels for the veri\u00adfi\u00adca\u00adtion of iden\u00adtity, which differ in the extent of the veri\u00adfi\u00adca\u00adtion. At the lowest level (class 1), it is only checked whether the appli\u00adcant has the domain noted in the certi\u00adfi\u00adcate. For class 2 certificates, the iden\u00adtity of the appli\u00adcant (individual or company) is checked in more detail, for example with copies of identification docu\u00adments and company docu\u00adments. For class 3 certificates, the veri\u00adfi\u00adca\u00adtion is even more inten\u00adsive, and further docu\u00adments are required. Class 3 certificates are also referred to as extended vali\u00adda\u00adtion certificates and are charac\u00adte\u00adrized, among other things, by the fact that their use in modern brow\u00adsers is clearly high\u00adlighted.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Certi\u00adfi\u00adca\u00adtion Autho\u00adrity (CA)<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">\n<div class=\"ql-block\" data-block-id=\"block-6f53776e-3cd2-4b47-b253-eff24596adb7\">In information secu\u00adrity, a certi\u00adfi\u00adcate autho\u00adrity (CA) is an orga\u00adniza\u00adtion that issues digital certificates. A digital certi\u00adfi\u00adcate is used to assign a specific public key to a person or orga\u00adniza\u00adtion. This assign\u00adment is authen\u00adti\u00adcated by the certi\u00adfi\u00adca\u00adtion autho\u00adrity by affi\u00adxing its own digital signa\u00adture to it.<\/div>\n<p><\/p>\n<div class=\"ql-block\" data-block-id=\"block-5b1665c3-d5df-4144-a718-f2282a9c34cd\">&nbsp;<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p>\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">\n<div class=\"ql-block\" data-block-id=\"block-8806e779-8923-4138-954b-56697915bb0a\">Digital certificates contain \u201ckeys\u201d and additional information that are used for authen\u00adti\u00adca\u00adtion as well as encryp\u00adtion and decryp\u00adtion of confi\u00adden\u00adtial data that is distri\u00adbuted via the internet and other networks. Additional information includes, for example, vali\u00addity periods, refe\u00adrences to certi\u00adfi\u00adcate revo\u00adca\u00adtion lists, etc., which are included in the certi\u00adfi\u00adcate by the CA.<\/div>\n<p><\/p><\/div>\n<p><\/p>\n<div data-block-id=\"block-8806e779-8923-4138-954b-56697915bb0a\">The task of a certi\u00adfi\u00adca\u00adtion autho\u00adrity is to issue and verify these digital certificates. It is respon\u00adsible for the provi\u00adsion, allo\u00adca\u00adtion, and inte\u00adgrity assu\u00adrance of the certificates it issues. It thus forms the core of the public key infra\u00adstruc\u00adture.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p>\n<div data-block-id=\"block-8806e779-8923-4138-954b-56697915bb0a\">A certi\u00adfi\u00adca\u00adtion autho\u00adrity can be a specific company or an insti\u00adtu\u00adtion within a company that has installed its corre\u00adspon\u00adding server (for example with OpenSSL\/enterprise PKI from Micro\u00adsoft). Public orga\u00adniza\u00adtions or govern\u00adment agen\u00adcies can also serve as a certi\u00adfi\u00adca\u00adtion autho\u00adrity, e.g. in Germany the Federal Network Agency.<\/div>\n<p><\/p><\/div>\n<p><\/p>\n<div data-block-id=\"block-8806e779-8923-4138-954b-56697915bb0a\">In Germany, additional, legally defined requi\u00adre\u00adments must be met for the issu\u00adance of advanced elec\u00adtronic certificates accor\u00adding to \u00a7 2 number 2 Signa\u00adture Act (SigG) or for quali\u00adfied elec\u00adtronic signa\u00adtures accor\u00adding to \u00a7 2 number 3 Signa\u00adture Act. In parti\u00adcular, the issuers of the certificates are subject to super\u00advi\u00adsion by the Federal Network Agency to ensure the relia\u00adbi\u00adlity and inte\u00adgrity of these certificates in legal tran\u00adsac\u00adtions. For example, the appli\u00adcant for such a signa\u00adture must perso\u00adnally iden\u00adtify himself to an approved body through his iden\u00adtity card so that such an elec\u00adtronic certi\u00adfi\u00adcate can be issued to him. The data centers operated by the issuers must be parti\u00adcu\u00adlarly secure and thus meet high-secu\u00adrity requi\u00adre\u00adments.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>PKI<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">\n<div class=\"ql-block\" data-block-id=\"block-6f53776e-3cd2-4b47-b253-eff24596adb7\">PKI stands for Public-Key-Infra\u00adstruc\u00adture and in cryp\u00adto\u00adlogy refers to a system that can issue, distri\u00adbute and verify digital certificates. The certificates issued within a PKI are used to secure computer-based commu\u00adni\u00adca\u00adtion.<br>Today\u2019s secu\u00adrity in compa\u00adnies relies on multi-level systems so that the highest certi\u00adfi\u00adca\u00adtion autho\u00adrity and its private key cannot be compro\u00admised (i.e. read out and misused by crooks or mali\u00adcious people). <br><a href=\"https:\/\/de.wikipedia.org\/wiki\/Public-Key-Infrastruktur&nbsp;\">https:\/\/en.wikipedia.org\/wiki\/Public_key_infrastructure<\/a><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=\u201c1_2,1_2\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Key (Cryp\u00adto\u00adlogy)<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-26aa70d1-2ed1-4b0f-a1b0-6d6a14e51587\">\n<div class=\"ql-block\" data-block-id=\"block-6f53776e-3cd2-4b47-b253-eff24596adb7\">In cryp\u00adto\u00adlogy, a key is information that para\u00adme\u00adter\u00adizes a cryp\u00adto\u00adgra\u00adphic algo\u00adrithm and thus controls it.<br>In modern, computer-based symme\u00adtric and also asym\u00adme\u00adtric proce\u00addures, the key is a bit sequence.<br>The key is the central compo\u00adnent for decryp\u00adting a cipher\u00adtext and thus obtai\u00adning the plain\u00adtext.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][et_pb_column type=\u201c1_2\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f98270d9c2d9e0023a9fc4c.png\u201d alt=\u201cDiagram: Secret text decrypted with secret key to plain text\u201d title_text=\u201cDiagram: Secret text decrypted with secret key to plain text\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>Key for symme\u00adtrical methods<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">In symme\u00adtrical proce\u00addures, i.e. in all clas\u00adsical methods of cryp\u00adto\u00adgraphy and also in modern algo\u00adrithms such as the Data Encryp\u00adtion Stan\u00addard (DES) or its successor, the Advanced Encryp\u00adtion Stan\u00addard (AES), both commu\u00adni\u00adca\u00adtion part\u00adners use the same (secret) key for both encryp\u00adtion and decryp\u00adtion. While clas\u00adsical methods, in which the text must be encrypted (i.e. encrypted and\/or decrypted) by hand, almost always use a pass\u00adword as the key, the key in modern, i.e. computer-based, symme\u00adtrical methods usually consists of a bit sequence.<br>The secu\u00adrity of a proce\u00addure depends not only on the algo\u00adrithm itself but also on the key length. If an attack is found against a proce\u00addure that is more effi\u00adcient than the brute force method, i.e. trying out all possible keys, the proce\u00addure is considered broken. The key length ther\u00ade\u00adfore directly indi\u00adcates the secu\u00adrity level of a secure proce\u00addure.<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d background_color=\u201d#eeeeee\u201d custom_margin=\u201d||15px||false|false\u201d custom_padding=\u201c30px|30px|30px|30px|true|true\u201d border_radii=\u201con|10px|10px|10px|10px\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>The key to asym\u00adme\u00adtrical methods<\/p>\n<p>[\/et_pb_text][et_pb_text _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<div class=\"ql-block\" data-block-id=\"block-d7417d46-7d81-45f3-ba60-276b182bd382\">\n<div class=\"ql-block\" data-block-id=\"block-f356794f-3325-451a-b8f8-bc8bcf1782c5\">\n<div class=\"ql-block\" data-block-id=\"block-f7646172-9955-4ba5-994e-cab13374f22d\">\n<div class=\"ql-block\" data-block-id=\"block-24c5615c-33e4-448a-9587-6780d61266ba\">\n<div class=\"ql-block\" data-block-id=\"block-d1614576-7579-4f79-8e67-40e00d914c19\">\n<div class=\"ql-block\" data-block-id=\"block-11f007b8-a89b-4ea8-adce-52ff3fc6faee\">\n<p>Asym\u00adme\u00adtric methods, such as the RSA cryp\u00adto\u00adsystem, use key pairs consis\u00adting of a public key and a private key.<br>The public key is not secret, it is supposed to be known to other users, for example by distri\u00adbu\u00adtion via key servers or certi\u00adfi\u00adca\u00adtion autho\u00adri\u00adties. It can be used to perform public opera\u00adtions, i.e., to encrypt messages or verify digital signa\u00adtures. It is important that a public key can be clearly assi\u00adgned to a user or company. If this is not the case, for example, if a message is encrypted with the public key of another user, that user can read the message even though it was not intended for him. To be able to name keys easily, one uses a finger\u00adprint, a short hash value that uniquely iden\u00adti\u00adfies a key.<br>To decrypt a cipher\u00adtext or to sign a message, the private key is needed. In contrast to symme\u00adtric proce\u00addures, in which several users share a secret key, in the asym\u00adme\u00adtric proce\u00addure only one user\/company has the private (secret) key. This circum\u00ads\u00adtance is what makes it possible in the first place to assign a signa\u00adture uniquely to a user\/company. It is ther\u00ade\u00adfore funda\u00admental that the private key cannot be derived from the public key.<\/p>\n<\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p><\/p><\/div>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_image src=\u201chttps:\/\/neuroom.net\/wp-content\/uploads\/5f98233d9c2d9e0023a9fc48.jpeg\u201d alt=\u201cKey to Secu\u00adrity\u201d title_text=\u201cKey to Secu\u00adrity\u201d align=\u201ccenter\u201d _builder_version=\u201c4.21.0\u201d _module_preset=\u201cdefault\u201d module_alignment=\u201cright\u201d border_radii=\u201con|10px|10px|10px|10px\u201d box_shadow_style=\u201cpreset1\u201d global_colors_info=\u201d{}\u201d][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=\u201c1\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201ca289194b-f13b-4adf-a218-cf497632a216\u201d background_color=\u201d#3C92CA\u201d global_colors_info=\u201d{}\u201d][et_pb_row module_class=\u201cnarrow\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_column type=\u201c4_4\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d global_colors_info=\u201d{}\u201d][et_pb_text module_class=\u201cbigger\u201d _builder_version=\u201c4.20.0\u201d _module_preset=\u201cdefault\u201d text_orientation=\u201ccenter\u201d background_layout=\u201cdark\u201d global_colors_info=\u201d{}\u201d]<\/p>\n<p>For more examples and expl\u00adana\u00adtions, take a look at our <strong>documentation<\/strong>.<\/p>\n<p>[\/et_pb_text][et_pb_button button_url=\u201chttps:\/\/doc.neuroom.net\/en\/docs\/intro\/\u201d button_text=\u201cTo the documentation\u201d button_alignment=\u201ccenter\u201d _builder_version=\u201c4.23.1\u201d _module_preset=\u201c965070fa-b1ed-4907-a2aa-99357de3b4c8\u201d hover_enabled=\u201c0\u201d global_colors_info=\u201d{}\u201d url_new_window=\u201con\u201d sticky_enabled=\u201c0\u201d][\/et_pb_button][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p><span><span><a href=\"https:\/\/neuroom.net\/en\/start\/\">Home<\/a><\/span><\/span>Secu\u00adri\u00adty\u00adIn\u00adtro\u00adduc\u00adtion This article is not speci\u00adfi\u00adcally about secu\u00adrity in NeuroomNet, but, since NeuroomNet is a web-based tool, about the secu\u00adrity of web-based tools in general. In other words, what you should consider opera\u00adting a system like NeuroomNet secu\u00adrely. We are happy to help you with any ques\u00adtions you may have, but you can get some [\u2026]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":3144,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","wp_typography_post_enhancements_disabled":false,"iawp_total_views":31,"footnotes":""},"class_list":["post-3096","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Security | NeuroomNet<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/neuroom.net\/en\/things-to-know\/security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security | NeuroomNet\" \/>\n<meta property=\"og:description\" content=\"SecurityIntroduction This article is not specifically about security in NeuroomNet, but, since NeuroomNet is a web-based tool, about the security of web-based tools in general. In other words, what you should consider operating a system like NeuroomNet securely. We are happy to help you with any questions you may have, but you can get some [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/neuroom.net\/en\/things-to-know\/security\/\" \/>\n<meta property=\"og:site_name\" content=\"NeuroomNet\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-30T10:18:06+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"31 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/neuroom.net\/en\/things-to-know\/security\/\",\"url\":\"https:\/\/neuroom.net\/en\/things-to-know\/security\/\",\"name\":\"Security | NeuroomNet\",\"isPartOf\":{\"@id\":\"https:\/\/neuroom.net\/en\/#website\"},\"datePublished\":\"2023-05-23T07:52:44+00:00\",\"dateModified\":\"2026-09-30T10:18:06+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/neuroom.net\/en\/things-to-know\/security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/neuroom.net\/en\/things-to-know\/security\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/neuroom.net\/en\/things-to-know\/security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/neuroom.net\/en\/start\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Things to know\",\"item\":\"https:\/\/neuroom.net\/en\/wissenswertes\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/neuroom.net\/en\/#website\",\"url\":\"https:\/\/neuroom.net\/en\/\",\"name\":\"NeuroomNet\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/neuroom.net\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/neuroom.net\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/neuroom.net\/en\/#organization\",\"name\":\"NeuroomNet\",\"alternateName\":\"NrN\",\"url\":\"https:\/\/neuroom.net\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/neuroom.net\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/neuroom.net\/wp-content\/uploads\/NeuroomNet-Logo.svg\",\"contentUrl\":\"https:\/\/neuroom.net\/wp-content\/uploads\/NeuroomNet-Logo.svg\",\"width\":730,\"height\":120,\"caption\":\"NeuroomNet\"},\"image\":{\"@id\":\"https:\/\/neuroom.net\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.youtube.com\/@neuroomnet6387\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security | NeuroomNet","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/neuroom.net\/en\/things-to-know\/security\/","og_locale":"en_US","og_type":"article","og_title":"Security | NeuroomNet","og_description":"SecurityIntroduction This article is not specifically about security in NeuroomNet, but, since NeuroomNet is a web-based tool, about the security of web-based tools in general. In other words, what you should consider operating a system like NeuroomNet securely. We are happy to help you with any questions you may have, but you can get some [&hellip;]","og_url":"https:\/\/neuroom.net\/en\/things-to-know\/security\/","og_site_name":"NeuroomNet","article_modified_time":"2026-09-30T10:18:06+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"31 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/neuroom.net\/en\/things-to-know\/security\/","url":"https:\/\/neuroom.net\/en\/things-to-know\/security\/","name":"Security | NeuroomNet","isPartOf":{"@id":"https:\/\/neuroom.net\/en\/#website"},"datePublished":"2023-05-23T07:52:44+00:00","dateModified":"2026-09-30T10:18:06+00:00","breadcrumb":{"@id":"https:\/\/neuroom.net\/en\/things-to-know\/security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/neuroom.net\/en\/things-to-know\/security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/neuroom.net\/en\/things-to-know\/security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/neuroom.net\/en\/start\/"},{"@type":"ListItem","position":2,"name":"Things to know","item":"https:\/\/neuroom.net\/en\/wissenswertes\/"},{"@type":"ListItem","position":3,"name":"Security"}]},{"@type":"WebSite","@id":"https:\/\/neuroom.net\/en\/#website","url":"https:\/\/neuroom.net\/en\/","name":"NeuroomNet","description":"","publisher":{"@id":"https:\/\/neuroom.net\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/neuroom.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/neuroom.net\/en\/#organization","name":"NeuroomNet","alternateName":"NrN","url":"https:\/\/neuroom.net\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/neuroom.net\/en\/#\/schema\/logo\/image\/","url":"https:\/\/neuroom.net\/wp-content\/uploads\/NeuroomNet-Logo.svg","contentUrl":"https:\/\/neuroom.net\/wp-content\/uploads\/NeuroomNet-Logo.svg","width":730,"height":120,"caption":"NeuroomNet"},"image":{"@id":"https:\/\/neuroom.net\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.youtube.com\/@neuroomnet6387"]}]}},"_links":{"self":[{"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/pages\/3096","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/comments?post=3096"}],"version-history":[{"count":3,"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/pages\/3096\/revisions"}],"predecessor-version":[{"id":6100,"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/pages\/3096\/revisions\/6100"}],"up":[{"embeddable":true,"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/pages\/3144"}],"wp:attachment":[{"href":"https:\/\/neuroom.net\/en\/wp-json\/wp\/v2\/media?parent=3096"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}