dido:public:ra:xapend:xapend.b_stds:tech:ietf:tls
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
dido:public:ra:xapend:xapend.b_stds:tech:ietf:tls [2020/11/13 02:21] nick ↷ Links adapted because of a move operation |
dido:public:ra:xapend:xapend.b_stds:tech:ietf:tls [2021/08/17 13:37] (current) murphy |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ===== RFC2246 - The TLS Protocol ===== | ===== RFC2246 - The TLS Protocol ===== | ||
| - | [[dido:public:ra:xapend:xapend.b_stds:tech:ietf| return to the IETF Standards ]] | + | [[dido:public:ra:xapend:xapend.b_stds:tech:ietf:start| return to the IETF Standards ]] |
| <table> | <table> | ||
| Line 15: | Line 15: | ||
| ==== Introduction ==== | ==== Introduction ==== | ||
| - | : //The primary goal of the TLS Protocol is to provide privacy and data | + | : //The primary [[dido:public:ra:xapend:xapend.a_glossary:g:goal|goal]] of the TLS Protocol is to provide privacy and data |
| - | integrity between two communicating applications. The protocol is | + | integrity between two communicating [[dido:public:ra:xapend:xapend.a_glossary:a:application|applications]]. The protocol is |
| composed of two layers: the TLS Record Protocol and the TLS Handshake | composed of two layers: the TLS Record Protocol and the TLS Handshake | ||
| Protocol. At the lowest level, layered on top of some reliable | Protocol. At the lowest level, layered on top of some reliable | ||
| Line 23: | Line 23: | ||
| properties:// | properties:// | ||
| - | * //The connection is private. Symmetric cryptography is used for | + | * //The connection is private. Symmetric [[dido:public:ra:xapend:xapend.a_glossary:c:cryptography|cryptography]] is used for |
| - | data encryption (e.g., DES [[https://tools.ietf.org/html/rfc2246#ref-DES | DES]] | + | data [[dido:public:ra:xapend:xapend.a_glossary:e:encryption|encryption]] (e.g., DES [[https://tools.ietf.org/html/rfc2246#ref-DES | DES]] |
| , | , | ||
| - | RC4 [[https://tools.ietf.org/html/rfc2246#ref-RC4 | RC4]], etc.) The keys for | + | RC4 [[https://tools.ietf.org/html/rfc2246#ref-RC4 | RC4]], etc.) The [[dido:public:ra:xapend:xapend.a_glossary:k:key|keys]] for |
| this symmetric encryption are generated uniquely for each | this symmetric encryption are generated uniquely for each | ||
| connection and are based on a secret negotiated by another | connection and are based on a secret negotiated by another | ||
| Line 41: | Line 41: | ||
| : //The TLS Record Protocol is used for encapsulation of various higher | : //The TLS Record Protocol is used for encapsulation of various higher | ||
| level protocols. One such encapsulated protocol, the TLS Handshake | level protocols. One such encapsulated protocol, the TLS Handshake | ||
| - | Protocol, allows the server and client to authenticate each other and | + | Protocol, allows the [[dido:public:ra:xapend:xapend.a_glossary:s:server|server]] and [[dido:public:ra:xapend:xapend.a_glossary:c:client|client]] to authenticate each other and |
| to negotiate an encryption algorithm and cryptographic keys before | to negotiate an encryption algorithm and cryptographic keys before | ||
| the application protocol transmits or receives its first byte of | the application protocol transmits or receives its first byte of | ||
| Line 48: | Line 48: | ||
| * //The peer's identity can be authenticated using asymmetric, or | * //The peer's identity can be authenticated using asymmetric, or | ||
| - | public key, cryptography (e.g., RSA [[https://tools.ietf.org/html/rfc2246#ref-RSA | RSA]], | + | [[dido:public:ra:xapend:xapend.a_glossary:p:public_key|public key]], cryptography (e.g., RSA [[https://tools.ietf.org/html/rfc2246#ref-RSA | RSA]], |
| DSS [[https://tools.ietf.org/html/rfc2246#ref-DSS | DSS]], etc.). This | DSS [[https://tools.ietf.org/html/rfc2246#ref-DSS | DSS]], etc.). This | ||
| - | authentication can be made optional, but is generally required | + | [[dido:public:ra:xapend:xapend.a_glossary:a:authentication|authentication]] can be made optional, but is generally required |
| for at least one of the peers.// | for at least one of the peers.// | ||
| Line 69: | Line 69: | ||
| exchanged are left up to the judgment of the designers and | exchanged are left up to the judgment of the designers and | ||
| implementors of protocols which run on top of TLS.// | implementors of protocols which run on top of TLS.// | ||
| + | |||
| + | /**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | ||
| + | /* To add a discussion page to this page, comment out the line that says | ||
| + | ~~DISCUSSION:off~~ | ||
| + | */ | ||
| + | ~~DISCUSSION:on|Outstanding Issues~~ | ||
| + | ~~DISCUSSION:off~~ | ||
dido/public/ra/xapend/xapend.b_stds/tech/ietf/tls.1605252078.txt.gz · Last modified: 2020/11/13 02:21 by nick
