RSA is the most popular public-key cryptosystem on the Web today but long-term trends such as the proliferation of smaller, simpler devices and increasing security needs will make continued reliance on RSA more challenging over time. We offer Elliptic Curve Cryptography (ECC) as a suitable alternative and describe our integration of this technology into several key components of the Web's security infrastructure. We also present experimental results quantifying the benefits of using ECC for secure web transactions. Categories and Subject Descriptors: E.3 [Data Encryption]: Public key cryptosystems; H.4.3 [Information Systems Applications]: Communications Applications ? Information browsers, Electronic mail; C.2.2 [Computer Communication Networks]: Network Protocols ? Applications General Terms: Security, Standardization, Experimentation.