Secure Protocols Flashcards
What is DNS and tell me the port # and protocol it uses.
Domain Name System - resolves domain names to IP addresses (internet’s phone book)
UDP port# 53
What is DNSSEC?
Domain Name System Security extension
Is a way to validate the integrity and authenticity of the DNS info by digitally assigning it.
Protects from DNS poisoning
What is HTTP and HTTPS, port# and protocol
HTTP and HTTPS used for web traffic
80 http - unsecured
443 https - uses SSL/TLS to encrypt web traffic
any protocol that ends with S (https) uses SSL/TLS
What is SSH and what # and protocol does it use?
Secure Shell / port 22 / TCP - Used for remote management of a device securely.
Use version 2 of ssh whenever possible.
What is Telnet / port # and protocol ?
Port 23 / TCP - plain text - NOT SECURE
FTP?
File Transfer protocol
TCP port 20/21
not secure
SFTP
File Tranfer protocol over SSH
TCP port 22
FTPS
File transfer protocol over ssl/tls
989 and 990
POP3
TCP port 110 - unsecure, plaintext mail protocol
IMAP
TCP 143 - Unsecure, plaintext mail protocol
POP3s
TCP 995 - secure using SSL/TLS
IMAPs
TCP 993 - Secure email protocol (only secure data in transit between client and server)
S/MIME
This is use for end to end email encryption using public/private key pairs. This is between the sender and the recipient
RTP
Real-time Protocol -
provides voice and audio services over IP that typically uses UDP.
Example: Streaming media / Phone calls / Videoconferencing
SRTP
Secure Real time protocol
Secure extension for real time phone/video communication. This encrypts the data now.