What web developers should know about SSL but probably don’t.