Transport Layer Security & Secure Sockets Layer

Question 1

Define

Transport Layer Security (TLS) and Secure Sockets Layer (SSL)

TLS, SSL

Answer 1

Provides end-to-end secure communications for any TCP connection

Question 2

Describe

HTTP Connection

TLS, SSL

Answer 2

1. TCP SYN from Client
2. TCP SYN-ACK response from Server
3. TCP ACK from Client
4. TLS Interaction
5. Certificate (verified by Client)

Question 3

Limitations to TLS and SSL

TLS, SSL

Answer 3

• Expensive: public-key crypto/asymmetric; certificate distribution on multiple servers
• Could lead to a DoS because of the heavy computation request for amplification
• Latnecy (delays)
• Certificates could be invalid (lack of trust)