Skip to content

Instantly share code, notes, and snippets.

@JPBM135

JPBM135/tls.md

Created April 30, 2024 00:13
Show Gist options
  • Save JPBM135/f02583f8e1762600f156957f368344c1 to your computer and use it in GitHub Desktop.
Save JPBM135/f02583f8e1762600f156957f368344c1 to your computer and use it in GitHub Desktop.
Download ZIP
TLS Research
Raw
tls.md

TLS

A widely adopted security protocol designed to facilitate privacy and data security for communications over the Internet.

The primary case of TLS is encrypting the communications betweem web applications and servers. Other use cases of TLS includes:

  • VoIP
  • Email
  • Messaging

TLS was proposed by the Internet Engineering Task Force (IETF), an international standards organization, and the first version of the protocol was published in 1999. The most recent version is TLS 1.3, which was published in 2018.

Difference between TLS and SSL

TLS evolved from SSL, the version 3.1 of SSL was renamed to TLS 1.0. It was changed to in order to indicate the disassociation from Netscape.

Difference between TLS and HTTPS

HTTPS is actually the most common implementation of the TLS encryption protocol, is used by all websites and some web services.

Why should we use TLS?

TLS encryption can help protect applications from data breaches and man in the middle attacks. TLS-protected HTTPS is a standard practice for websites.

How does TLS work?

1. TLS Handshake

The TLS connection is initiated following a pattern called TLS Handshake. Every time an user navigates to an website, the TLS handshake begins.

2. Steps

  1. Specify which version to use
  2. Decide on which cypher suites
  3. Authenticate the identity of the server using the TLS ceritficate
  4. Generate session keys for encrypting messages after the handshake is completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment