This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
dido:public:ra:xapend:xapend.b_stds:tech:ietf:ssl [2020/05/07 18:56] nick ↷ Page moved from dido:public:xapend.stds:tech:ietf:ssl to dido:public:ra:xapend.stds:tech:ietf:ssl |
dido:public:ra:xapend:xapend.b_stds:tech:ietf:ssl [2021/08/17 13:40] (current) murphy |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ===== RFC6101 - The Secure Sockets Layer (SSL) Protocol Version 3.0 ===== | ===== RFC6101 - The Secure Sockets Layer (SSL) Protocol Version 3.0 ===== | ||
| - | [[dido:public:xapend.stds:tech:ietf| return to the IETF Standards ]] | + | [[dido:public:ra:xapend:xapend.b_stds:tech:ietf:start| return to the IETF Standards ]] |
| <table> | <table> | ||
| - | <caption>Data sheet for The Secure Sockets Layer (SSL) Protocol Version 3.0</caption> | + | <caption>Data sheet for The [[dido:public:ra:xapend:xapend.a_glossary:s:ssl|Secure Sockets Layer (SSL)]] Protocol Version 3.0</caption> |
| | Title | The Secure Sockets Layer (SSL) Protocol Version 3.0 | | | Title | The Secure Sockets Layer (SSL) Protocol Version 3.0 | | ||
| | Acronym | SSL | | | Acronym | SSL | | ||
| Line 15: | Line 15: | ||
| ==== Introduction ==== | ==== Introduction ==== | ||
| - | : //The primary goal of the SSL protocol is to provide privacy and | + | : //The primary [[dido:public:ra:xapend:xapend.a_glossary:g:goal|goal]] of the SSL protocol is to provide privacy and |
| - | reliability between two communicating applications. The protocol is | + | reliability between two communicating [[dido:public:ra:xapend:xapend.a_glossary:a:application|applications]]. The protocol is |
| composed of two layers. At the lowest level, layered on top of some | composed of two layers. At the lowest level, layered on top of some | ||
| reliable transport protocol (e.g., TCP [[https://tools.ietf.org/html/rfc0793 | RFC0793]]), is the SSL record | reliable transport protocol (e.g., TCP [[https://tools.ietf.org/html/rfc0793 | RFC0793]]), is the SSL record | ||
| protocol. The SSL record protocol is used for encapsulation of | protocol. The SSL record protocol is used for encapsulation of | ||
| various higher level protocols. One such encapsulated protocol, the | various higher level protocols. One such encapsulated protocol, the | ||
| - | SSL handshake protocol, allows the server and client to authenticate | + | SSL handshake protocol, allows the [[dido:public:ra:xapend:xapend.a_glossary:s:server|server]] and [[dido:public:ra:xapend:xapend.a_glossary:c:client|client]] to authenticate |
| - | each other and to negotiate an encryption algorithm and cryptographic | + | each other and to negotiate an [[dido:public:ra:xapend:xapend.a_glossary:e:encryption|encryption]] algorithm and cryptographic |
| - | keys before the application protocol transmits or receives its first | + | [[dido:public:ra:xapend:xapend.a_glossary:k:key|keys]] before the application protocol transmits or receives its first |
| byte of data. One advantage of SSL is that it is application | byte of data. One advantage of SSL is that it is application | ||
| protocol independent. A higher level protocol can layer on top of | protocol independent. A higher level protocol can layer on top of | ||
| the SSL protocol transparently. The SSL protocol provides connection | the SSL protocol transparently. The SSL protocol provides connection | ||
| - | security that has three basic properties:// | + | [[dido:public:ra:xapend:xapend.a_glossary:a:applicationsecurity|security]] that has three basic properties:// |
| * //The connection is private. Encryption is used after an initial | * //The connection is private. Encryption is used after an initial | ||
| - | handshake to define a secret key. Symmetric cryptography is used | + | handshake to define a secret key. Symmetric [[dido:public:ra:xapend:xapend.a_glossary:c:cryptography|cryptography]] is used |
| for data encryption (e.g., DES, 3DES, RC4).// | for data encryption (e.g., DES, 3DES, RC4).// | ||
| * //The peer's identity can be authenticated using asymmetric, or | * //The peer's identity can be authenticated using asymmetric, or | ||
| - | public key, cryptography (e.g., RSA, DSS).// | + | [[dido:public:ra:xapend:xapend.a_glossary:p:public_key|public key]], cryptography (e.g., RSA, DSS).// |
| * //The connection is reliable. Message transport includes a message | * //The connection is reliable. Message transport includes a message | ||
| - | integrity check using a keyed Message Authentication Code (MAC) | + | integrity check using a keyed Message [[dido:public:ra:xapend:xapend.a_glossary:a:authentication|Authentication]] Code (MAC) |
| [RFC2104]. Secure hash functions (e.g., SHA, MD5) are used for | [RFC2104]. Secure hash functions (e.g., SHA, MD5) are used for | ||
| MAC computations.// | MAC computations.// | ||
| + | |||
| + | |||
| + | /**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | ||
| + | /* To add a discussion page to this page, comment out the line that says | ||
| + | ~~DISCUSSION:off~~ | ||
| + | */ | ||
| + | ~~DISCUSSION:on|Outstanding Issues~~ | ||
| + | ~~DISCUSSION:off~~ | ||