Secure Sockets Layer (SSL) is depricated and Introduced Transport Layer Security (TLS) .To provide communications security over a computer network SSL/TLS was introduced .There are several version of protocols are widely used by the appliations . Websites can use these protocols to secure their sites.The TLS protocol aims primarily to provide privacy and data integrity between two or more communicating computer applications.It make sure the data transfered between client ( browser ) and server are not modified during transit .Data integrity is provided .

Currently available protocols .
SSL 1.0, 2.0, and 3.0
TLS 1.0
TLS 1.1
TLS 1.2 –> Only TLV1.2 and above are stornger other are considers week and recomend not to use .
TLS 1.3 –>Many of the Organizations are not yet started to use . Will take some years to change to this protocol .

Protocol Published Staus
SSL 1.0 Unpublished Unpublished
SSL 2.0 1995 Deprecated in 2011 (RFC 6176)
SSL 3.0 1996 Deprecated in 2015 (RFC 7568)
TLS 1.0 1999 Deprecated in 2020
TLS 1.1 2006 Deprecated in 2020
TLS 1.2 2008
TLS 1.3 2018

To Enable SSL we have to use Certificate on the server . It has private and public Keys.
Public Keys are something that are available on the thirdparty site .Also called as Signers (Root and Intermediate Certs )
Private keys are the Server Certificate with Private key resides on the server.

Along with Protocols we will use ciphers which has the Algorith , Key to form the master secret key with the help of certificate private key.
Below table

Algorithm SSL 2.0 SSL 3.0 TLS 1.0 TLS 1.1 TLS 1.2 TLS 1.3
RSA Yes Yes Yes Yes Yes No
DH-RSA No Yes Yes Yes Yes No
DHE-RSA (forward secrecy) No Yes Yes Yes Yes Yes
ECDH-RSA No No Yes Yes Yes No
ECDHE-RSA (forward secrecy) No No Yes Yes Yes Yes
DH-DSS No Yes Yes Yes Yes No
DHE-DSS (forward secrecy) No Yes Yes Yes Yes No
ECDH-ECDSA No No Yes Yes Yes No
ECDHE-ECDSA (forward secrecy) No No Yes Yes Yes Yes
ECDH-EdDSA No No Yes Yes Yes No
ECDHE-EdDSA (forward secrecy) No No Yes Yes Yes Yes
PSK No No Yes Yes Yes
PSK-RSA No No Yes Yes Yes
DHE-PSK (forward secrecy) No No Yes Yes Yes Yes
ECDHE-PSK (forward secrecy) No No Yes Yes Yes Yes
SRP No No Yes Yes Yes
SRP-DSS No No Yes Yes Yes
SRP-RSA No No Yes Yes Yes
Kerberos No No Yes Yes Yes
DH-ANON (insecure) No Yes Yes Yes Yes
ECDH-ANON (insecure) No No Yes Yes Yes
Can refer other page for SSL Certificate provision steps SSL Certificate provision

Related Posts

Leave a Reply

Your email address will not be published.