Transport Layer Security - Revision history

Milesj2: finishing touches

2008-04-13T02:39:03Z

finishing touches

← Older revision		Revision as of 02:39, 13 April 2008
Line 1:		Line 1:
-	'''Transport Layer Security (TLS)''' is a cryptographic protocol that ensures privacy for communication over the Internet. It is the successor of the '''Secure Sockets Layer (SSL)''' protocol, though there are only minor differences that separate the two.	+	'''Transport Layer Security (TLS)''' is a cryptographic protocol that ensures privacy for communication over the Internet. It is the successor of the '''Secure Sockets Layer (SSL)''' protocol, though there are only minor differences that separate the two. TLS is composed of a handshake protocol and a record protocol.
		+
	{\| __TOC__		{\| __TOC__
	\|}		\|}
Line 9:		Line 10:
	==How It Works==		==How It Works==
	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Multiple TLS/SSL connections must be opened if the message passes through several points. [2]]]		[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Multiple TLS/SSL connections must be opened if the message passes through several points. [2]]]
-	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances. [1]	+	===Handshake Protocol===
		+	TLS Handshake Protocol is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances. [1]

	If a message needs to go through multiple points to reach its destination, a new TLS connection must be opened for each intermediate point, as diagrammed at right. In this model, the message from the client is not protected cryptographically at each server due to the computationally expensive cryptographic operations that are performed for every new TLS connection that is established. [2]		If a message needs to go through multiple points to reach its destination, a new TLS connection must be opened for each intermediate point, as diagrammed at right. In this model, the message from the client is not protected cryptographically at each server due to the computationally expensive cryptographic operations that are performed for every new TLS connection that is established. [2]

-	==~~Security Measures~~==	+	===Record Protocol===
-		+	TLS Record Protocol uses the keys that are created in the Handshake Protocol to secure application data. It is also responsible for verifying its integrity and origin. For outgoing messages, the record protocol encrypts and divides these messages into manageable blocks, then compresses the blocks. Once encrypted, the outgoing data is passed to the Transmission Control Protocol (TCP) for transport. Likewise, for incoming messages, this protocol is responsible for decompressing the blocks, reassembling the incoming messages, and decryption. [3]

	==Applications==		==Applications==
-	TLS is most commonly run with the application protocol HTTP to form HTTPS. It can also be run with any other protocol that needs dependable connections. [3]	+	TLS runs between application layers that run protocols like HTTP, FTP or SMTP, and layers that run transport protocols like TCP. TLS is most commonly run with the application protocol HTTP to form HTTPS. It can also be run with any other protocol that needs dependable connections. [4]

	==See Also==		==See Also==
Line 26:		Line 28:
	* 1: Comer, Douglas E. (2006) "Internetworking with TCP/IP: Principles, Protocols, and Architecture, Fifth Edition" Upper Saddle River: Pearson Prentice Hall. ISBN 0-13-187671-6.		* 1: Comer, Douglas E. (2006) "Internetworking with TCP/IP: Principles, Protocols, and Architecture, Fifth Edition" Upper Saddle River: Pearson Prentice Hall. ISBN 0-13-187671-6.
	* 2: "Chapter 3: Implementing Transport and Message Layer Security", Microsoft Developer Network, [http://msdn2.microsoft.com/en-us/library/aa480582.aspx http://msdn2.microsoft.com/en-us/library/aa480582.aspx] Retrieved on 2008-04-08.		* 2: "Chapter 3: Implementing Transport and Message Layer Security", Microsoft Developer Network, [http://msdn2.microsoft.com/en-us/library/aa480582.aspx http://msdn2.microsoft.com/en-us/library/aa480582.aspx] Retrieved on 2008-04-08.
-	* 3: "Transport Layer Security", Wikipedia, [http://en.wikipedia.org/wiki/Transport_Layer_Security http://en.wikipedia.org/wiki/Transport_Layer_Security] Retrieved on 2008-04-08.	+	* 3: "TLS Record Protocol", Microsoft Developer Network, [http://msdn2.microsoft.com/en-us/library/aa380514(VS.85).aspx http://msdn2.microsoft.com/en-us/library/aa380514(VS.85).aspx] Retrieved on 2008-04-08.
		+	* 4: "Transport Layer Security", Wikipedia, [http://en.wikipedia.org/wiki/Transport_Layer_Security http://en.wikipedia.org/wiki/Transport_Layer_Security] Retrieved on 2008-04-08.

	==External Links==		==External Links==
	* [http://msdn2.microsoft.com/en-us/library/aa480582.aspx Implementing Transport and Message Layer Security]		* [http://msdn2.microsoft.com/en-us/library/aa480582.aspx Implementing Transport and Message Layer Security]
		+	* [http://msdn2.microsoft.com/en-us/library/aa380514(VS.85).aspx TLS Record Protocol]

	<br>		<br>
	----		----
-	--[[User:Milesj2\|Milesj2]] 02:33, 11 April 2008 (EDT)	+	--[[User:Milesj2\|Milesj2]] 22:39, 12 April 2008 (EDT)

Milesj2 at 06:49, 11 April 2008

2008-04-11T06:49:50Z

← Older revision		Revision as of 06:49, 11 April 2008
Line 20:		Line 20:

	==See Also==		==See Also==
-	* [[Transport Layer]]	+	* [[Transport_layer\|Transport Layer]]
-	* [[Information Security Awareness]]	+	* [[Information_security_awareness\|Information Security Awareness]]

	==References==		==References==

Milesj2 at 06:42, 11 April 2008

2008-04-11T06:42:19Z

← Older revision		Revision as of 06:42, 11 April 2008
Line 20:		Line 20:

	==See Also==		==See Also==
-	* [~~http://www.cas.mcmaster.ca/wiki/index.php/Transport_layer~~ Transport Layer]	+	* [[Transport Layer]]
-	* [~~http://www.cas.mcmaster.ca/wiki/index.php/Information_security_awareness~~ Information Security Awareness]	+	* [[Information Security Awareness]]

	==References==		==References==

Milesj2 at 06:38, 11 April 2008

2008-04-11T06:38:57Z

← Older revision		Revision as of 06:38, 11 April 2008
Line 31:		Line 31:
	* [http://msdn2.microsoft.com/en-us/library/aa480582.aspx Implementing Transport and Message Layer Security]		* [http://msdn2.microsoft.com/en-us/library/aa480582.aspx Implementing Transport and Message Layer Security]

		+	<br>
	----		----
	--[[User:Milesj2\|Milesj2]] 02:33, 11 April 2008 (EDT)		--[[User:Milesj2\|Milesj2]] 02:33, 11 April 2008 (EDT)

Milesj2 at 06:38, 11 April 2008

2008-04-11T06:38:06Z

← Older revision		Revision as of 06:38, 11 April 2008
Line 5:		Line 5:

	==History==		==History==
-	During the mid 1990s, it became obvious that security was necessary for Internet commerce. Many different mechanisms were proposed by different groups. Netscape, Inc. was the group that initially developed the SSL protocol. While this was never formally adopted by the Internet Engineering Task Force (IETF), SSL was the basis of the IETF-designed protocol TLS which was first defined in 1999.[1] In fact, SSL and TLS are so similar that most implementations of SSL support TLS, and both protocols use the same port number.	+	During the mid 1990s, it became obvious that security was necessary for Internet commerce. Many different mechanisms were proposed by different groups. Netscape, Inc. was the group that initially developed the SSL protocol. While this was never formally adopted by the Internet Engineering Task Force (IETF), SSL was the basis of the IETF-designed protocol TLS which was first defined in 1999.[1] In fact, SSL and TLS are so similar that most implementations of SSL support TLS, and both protocols use the same port number.

	==How It Works==		==How It Works==
-	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security~~[2]~~'''<br>Multiple TLS/SSL connections must be opened, if the message ~~must go~~ through several points.]]	+	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Multiple TLS/SSL connections must be opened if the message passes through several points. [2]]]
	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances. [1]		TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances. [1]

	If a message needs to go through multiple points to reach its destination, a new TLS connection must be opened for each intermediate point, as diagrammed at right. In this model, the message from the client is not protected cryptographically at each server due to the computationally expensive cryptographic operations that are performed for every new TLS connection that is established. [2]		If a message needs to go through multiple points to reach its destination, a new TLS connection must be opened for each intermediate point, as diagrammed at right. In this model, the message from the client is not protected cryptographically at each server due to the computationally expensive cryptographic operations that are performed for every new TLS connection that is established. [2]
-

	==Security Measures==		==Security Measures==
Line 32:		Line 31:
	* [http://msdn2.microsoft.com/en-us/library/aa480582.aspx Implementing Transport and Message Layer Security]		* [http://msdn2.microsoft.com/en-us/library/aa480582.aspx Implementing Transport and Message Layer Security]

-
-	~~<br>~~
	----		----
	--[[User:Milesj2\|Milesj2]] 02:33, 11 April 2008 (EDT)		--[[User:Milesj2\|Milesj2]] 02:33, 11 April 2008 (EDT)

Milesj2: added applications, see also, references, external links

2008-04-11T06:33:53Z

added applications, see also, references, external links

← Older revision		Revision as of 06:33, 11 April 2008
Line 1:		Line 1:
	'''Transport Layer Security (TLS)''' is a cryptographic protocol that ensures privacy for communication over the Internet. It is the successor of the '''Secure Sockets Layer (SSL)''' protocol, though there are only minor differences that separate the two.		'''Transport Layer Security (TLS)''' is a cryptographic protocol that ensures privacy for communication over the Internet. It is the successor of the '''Secure Sockets Layer (SSL)''' protocol, though there are only minor differences that separate the two.
-
	{\| __TOC__		{\| __TOC__
	\|}		\|}
Line 6:		Line 5:

	==History==		==History==
-	During the mid 1990s, it became obvious that security was necessary for Internet commerce. Many different mechanisms were proposed by different groups. Netscape, Inc. was the group that initially developed the SSL protocol. While this was never formally adopted by the Internet Engineering Task Force (IETF), SSL was the basis of the IETF-designed protocol TLS which was first defined in 1999. In fact, SSL and TLS are so similar that most implementations of SSL support TLS, and both protocols use the same port number.	+	During the mid 1990s, it became obvious that security was necessary for Internet commerce. Many different mechanisms were proposed by different groups. Netscape, Inc. was the group that initially developed the SSL protocol. While this was never formally adopted by the Internet Engineering Task Force (IETF), SSL was the basis of the IETF-designed protocol TLS which was first defined in 1999.[1] In fact, SSL and TLS are so similar that most implementations of SSL support TLS, and both protocols use the same port number.

	==How It Works==		==How It Works==
-	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>~~If more than one connection is to be made, multiple~~ SSL connections must be opened.]]	+	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security[2]'''<br>Multiple TLS/SSL connections must be opened, if the message must go through several points.]]
-	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances.	+	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances. [1]
-		+
-	If a message needs to go through multiple points to reach its destination, a new SSL connection must be opened for each intermediate point. In this model, the original message from the client is not cryptographically protected on each intermediary because it traverses intermediate servers and additional computationally expensive cryptographic operations are performed for every new SSL connection that is established.	+

		+	If a message needs to go through multiple points to reach its destination, a new TLS connection must be opened for each intermediate point, as diagrammed at right. In this model, the message from the client is not protected cryptographically at each server due to the computationally expensive cryptographic operations that are performed for every new TLS connection that is established. [2]


Line 20:		Line 18:

	==Applications==		==Applications==
-		+	TLS is most commonly run with the application protocol HTTP to form HTTPS. It can also be run with any other protocol that needs dependable connections. [3]

	==See Also==		==See Also==
-		+	* [http://www.cas.mcmaster.ca/wiki/index.php/Transport_layer Transport Layer]
		+	* [http://www.cas.mcmaster.ca/wiki/index.php/Information_security_awareness Information Security Awareness]

	==References==		==References==
-	* 1: "Chapter 3: Implementing Transport and Message Layer Security", Microsoft Developer Network, [http://msdn2.microsoft.com/en-us/library/aa480582.aspx http://msdn2.microsoft.com/en-us/library/aa480582.aspx]	+	* 1: Comer, Douglas E. (2006) "Internetworking with TCP/IP: Principles, Protocols, and Architecture, Fifth Edition" Upper Saddle River: Pearson Prentice Hall. ISBN 0-13-187671-6.
		+	* 2: "Chapter 3: Implementing Transport and Message Layer Security", Microsoft Developer Network, [http://msdn2.microsoft.com/en-us/library/aa480582.aspx http://msdn2.microsoft.com/en-us/library/aa480582.aspx] Retrieved on 2008-04-08.
		+	* 3: "Transport Layer Security", Wikipedia, [http://en.wikipedia.org/wiki/Transport_Layer_Security http://en.wikipedia.org/wiki/Transport_Layer_Security] Retrieved on 2008-04-08.

	==External Links==		==External Links==
Line 34:		Line 35:
	<br>		<br>
	----		----
-	--[[User:Milesj2\|Milesj2]] 20:59, 10 April 2008 (EDT)	+	--[[User:Milesj2\|Milesj2]] 02:33, 11 April 2008 (EDT)

Milesj2 at 00:59, 11 April 2008

2008-04-11T00:59:20Z

← Older revision		Revision as of 00:59, 11 April 2008
Line 9:		Line 9:

	==How It Works==		==How It Works==
-	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>~~Explanation~~.]]	+	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>If more than one connection is to be made, multiple SSL connections must be opened.]]
	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances.		TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances.
		+
		+	If a message needs to go through multiple points to reach its destination, a new SSL connection must be opened for each intermediate point. In this model, the original message from the client is not cryptographically protected on each intermediary because it traverses intermediate servers and additional computationally expensive cryptographic operations are performed for every new SSL connection that is established.
		+


Line 23:		Line 26:

	==References==		==References==
-		+	* 1: "Chapter 3: Implementing Transport and Message Layer Security", Microsoft Developer Network, [http://msdn2.microsoft.com/en-us/library/aa480582.aspx http://msdn2.microsoft.com/en-us/library/aa480582.aspx]

	==External Links==		==External Links==
		+	* [http://msdn2.microsoft.com/en-us/library/aa480582.aspx Implementing Transport and Message Layer Security]
		+

	<br>		<br>
	----		----
-	--[[User:Milesj2\|Milesj2]] 20:41, 10 April 2008 (EDT)	+	--[[User:Milesj2\|Milesj2]] 20:59, 10 April 2008 (EDT)

Milesj2 at 00:41, 11 April 2008

2008-04-11T00:41:36Z

← Older revision		Revision as of 00:41, 11 April 2008
Line 9:		Line 9:

	==How It Works==		==How It Works==
-	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances.
	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Explanation.]]		[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Explanation.]]
		+	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances.

Milesj2: how it works added

2008-04-11T00:41:05Z

how it works added

← Older revision		Revision as of 00:41, 11 April 2008
Line 9:		Line 9:

	==How It Works==		==How It Works==
		+	TLS is used when the client wishes to open a secure connection to contact the server. The protocol allows each side to authenticate, so each side can be sure of whom they are communicating with. Both parties select the encryption algorithm to be used; it must be one that both sides support. TLS then allows the two sides to establish an encrypted connection. This is the highest level of security afforded, however many times only the server authenticates, and the client remains unauthenticated. This is less secure as the server cannot ensure that the client is who they claim to be, but this method is suitable under certain circumstances.
	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Explanation.]]		[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Explanation.]]

Line 27:		Line 28:

	<br>		<br>
-	~~<hr>~~	+	----
-	--[[User:Milesj2\|Milesj2]] 01:00, 9 April 2008 (EDT)	+	--[[User:Milesj2\|Milesj2]] 20:41, 10 April 2008 (EDT)

Milesj2 at 06:03, 9 April 2008

2008-04-09T06:03:12Z

← Older revision		Revision as of 06:03, 9 April 2008
Line 9:		Line 9:

	==How It Works==		==How It Works==
-	[[Image:sslsecurity.gif\|thumb\|right\|'''Transport Layer Security'''<br>Explanation.]]	+	[[Image:sslsecurity.gif\|thumb\|500px\|right\|'''Transport Layer Security'''<br>Explanation.]]