security protocols (SSL etc) Flashcards
what are the two types of security protocols
SSL (secure sockets layer) , TLS (transport layer security)
what is SSL
type of protocol used by computers to communicate with eachother across a network
what does SSL allow to happen
allows data to be sent and received securely across a network
what does SSL use
they use encryption and digital certificates, they use public and private keys (data is meaningless without these keys)
what do digital certificates in SSL contain
they contain public keys
how can we tell that a website is using SSL
(same as how we know the website is secure [https] )
- padlock
- https
- color of address bar changes
explain the process of SSL
web browser connects to the website
web browser requests the web server to identify itself
web server sends browser a copy of its SSL certificate
browser checks that the certificate is trustworthy and sends message
server acknowledges the message and the SSL session begins
what are the two layers of TLS
record layer
handshake layer
what is the record layer of TLS
it contains the data being transferred
can be used with or without encryption
what is the handshake layer of TLS
website and client authenticate eachother
encryption is used for secure session
what are differences between TLS and SSL
TLS makes use of session caching
TLS separates record and handshake protocol