Server authentication (thwarting impostors) Privacy using encryption (thwarting eavesdroppers) Data integrity (thwarting vandals)