SSL Certificate interaction with the Browser and the Server
- Browser checks the certificate to make sure that the site you are connecting to is the real site and not someone intercepting.
- Determine encryption types that the browser and web site server can both use to understand each other.
- Browser and Server send each other unique codes to use when scrambling (or encrypting) the information that will be sent.
- The browser and server start talking using the encryption, the web browser
Data and Password Encryption
Your data is encrypted the moment you press enter. This holds true for all communication between your internet browser and our servers, our servers and our partners, and all communications our servers do between themselves. If you want to get technical, we use HTTPS+TLS for all web connections and we encrypt all inter-datacenter communications.
Account Safety
Even more important than encrypting what is sent between you and our servers, however, is encrypting what is written to disk.
With this setup our most sensitive data cannot be decrypted by anybody, not even ourselves, except within the very secure confines of our very hardened servers. Even in the worst case scenario of an elite squad of armed mercenaries physically stealing our servers, your information would be useless because it could not be decrypted by anyone.