SSL and TLS protocols

Question 1

How can a user know if a website is secure by looking at the web address?

Answer 1

They should see https in the web address

Locked padlock icon

Question 2

Describe the process of SSL and how it provides a secure connection when selling art (art gallery website)

Answer 2

• SSL is a security protocol
• It encrypts data that is sent
• It sends digital certificates to the user’s web browser
• They contain the art gallery’s public key
• This can be used to authenticate the art gallery
• The transaction begins once the certificate is authenticated.

Question 3

Describe what is meant by Transport Layer Security(TLS)

Answer 3

• It is a security protocol
• It encrypts data sent over the web or network
• It is the updated version of SSL
• It has two layers: a handshake layer and a record layer

Question 4

What are some applications of TLS?

Answer 4

Cloud based storage, email, instant messaging, online banking, online shopping

Question 5

What are some applications of SSL?

Answer 5

Online shopping, email, instant messaging, VoIP

Question 6

How is an SSL connection established?

Answer 6

1. User’s web browser sends a message so it can connect with the required website secured by SSL.
2. The web browser sends sends a request to the web server. It requests it to identify itself.
3. The web server sends its digital certificate to the web browser.
4. The web browser authenticates the certificate.
5. If it is authentic, a connection is established. Any data sent it encrypted using public and private keys.

Question 7

How does SSL keep (the company’s) data safe?

Answer 7

It uses encryption. Encryption can be asymetric, symmetric or both. Public and private keys are used. Data is meaningless without a decryption key.