 - Transport Layer Security (TLS) is a protocol that ensures privacy between communicating applications and their users on the Internet. When a server and client communicate, TLS ensures that no third party may eavesdrop or tamper with any
message. TLS is the successor to the Secure Sockets Layer (SSL).
TLS is composed of two layers: the TLS Record Protocol and the TLS Handshake
Protocol. The TLS Record Protocol provides connection security with some encryption method such as the Data Encryption Standard (DES). The TLS Record Protocol can also be used without encryption. The TLS Handshake
Protocol allows the server and client to authenticate each other and to
negotiate an encryption algorithm and cryptographic keys before data is exchanged.
The TLS protocol is based on Netscape's SSL 3.0 protocol;
however, TLS and SSL are not interoperable. The TLS protocol does contain a mechanism that allows TLS implementation to back down to SSL 3.0. The most recent browser versions support TLS. The TLS Working Group, established in 1996, continues to work on the TLS protocol and related applications.
 |
Learn more about Network Protocols and Security |
| Voice over IP Security: VoIP Threat Taxonomy: In an excerpt from Voice over IP Security, author Patrick Park reviews VoIP threats, including spam, phishing and other threats against social context. |
| Securing VoIP Networks: Threats, Vulnerabilities and Countermeasures: In an excerpt from Securing VoIP Networks: Threats, Vulnerabilities and Countermeasures, authors Peter Thermos and Ari Takanen discuss the strengths and weaknesses of SRTP. |
| Man-in-the-middle attacks: This chapter excerpt examines how man-in-the-middle attacks affect Fibre Channel security and how to determine if your organization is at risk. |
| VoIP Security Learning Guide: More organizations are choosing to implement VoIP telephony for its cost savings. However, securing the technology comes with its own price tag. This guide is a compilation of resources that review ... |
| VoIP protocols: A technical guide: This guide reviews SIP and H.323 and their known vulnerabilities, as well as how functional protocol testing ("fuzzing") can help defeat such problems. |
| CONTRIBUTORS: |
Mikko Nieminen |
| LAST UPDATED: |
10 Jul 2006
|
 |
Do you have something to add to this definition? Let us know.
Send your comments to techterms@whatis.com
|
|
More resources from around the web:
|
|
Show me everything on 
