Internet Security

• It encompasses various measures, protocols, and practices designed to protect data and ensure privacy and integrity across networks and communication channels on the internet
• Addresses threats such as data breaches, hacking, malware, phishing, and other cyberattacks.

What is SSL/TLS?

• Secure Sockets Layer (SSL) certificates, sometimes called digital certificates, are used to establish an encrypted connection between a browser or user’s computer and a server or website
• SSL is the standard technology for securing an internet connection by encrypting data sent between a website and a browser (or between two servers). It prevents hackers from seeing or stealing any information transferred, including personal or financial data.
• TLS (Transport Layer Security) is an updated, more secure version of SSL. We still refer to our security certificates as SSL because it’s a more common term.
• HTTPS (Hyper Text Protocol Secure) appears in the URL when an SSL/TLS certificate secures a website. Users can view the certificate's details including the issuing authority, the website owner's corporate name, and other information.
• Protect Against Application-Level Threats

History of the Protocol

• SSL 1.0
  • Internal Netscape Design, Early 1994?
  • Lost in the mists of time
• SSL 2.0
  • Published by Netscape, November 1994
  • Several Weakness
• SSL 3.0
  • Designed by Netscape and Paul Kocher, November 1996
• TLS 1.0
  • Internet Standard based on SSL 3.0, January 1999
  • Not Interoperatable with SSL 3.0

SSL Protocol Architecture

Handshake Protocol

• Two parties: Client and Server
• Negotiate version of the protocol and the set of cryptographic algorithms to be used
  • Interoperability between different implementations of the protocol
• Authenticate Server and Client (Optional)
  • Use digital certificates to learn each other’s public keys and verify each other’s identity