Transport Layer Security (TLS)
Transport Layer Security (TLS) is a
protocol that ensures privacy between communicating
applications and their users on the Internet. When a
server and
client communicate, TLS ensures that no third party may eavesdrop or tamper with any
message. TLS is the successor to the Secure Sockets Layer (
SSL).
TLS is composed of two layers: the TLS Record Protocol and the TLS Handshake
Protocol. The TLS Record Protocol provides connection security with some encryption method such as the Data Encryption Standard (DES). The TLS Record Protocol can also be used without encryption. The TLS Handshake
Protocol allows the server and client to authenticate each other and to
negotiate an encryption algorithm and cryptographic keys before data is exchanged.
The TLS protocol is based on Netscape's SSL 3.0 protocol;
however, TLS and SSL are not interoperable. The TLS protocol does contain a mechanism that allows TLS implementation to back down to SSL 3.0. The most recent browser versions support TLS. The TLS Working Group, established in 1996, continues to work on the TLS protocol and related applications.
Contributor(s): Mikko Nieminen
This was last updated in June 2001
Dig Deeper
-
Adobe Reader X uses Microsoft's sandboxing technology to block potentially dangerous processes from executing beyond the confines of the software.
-
Microsoft repaired four vulnerabilities in its Forefront Unified Access Gateway and a critical flaw in Microsoft Office.
-
Download the entire October 2010 issue of Information Security magazine here in PDF format.
-
People who read this also read...
-
Resources from around the Web