I understand what SSL is but what exactly is SSL/TLS?

I understand what SSL is but what exactly is SSL/TLS?

--
Spin

SSL = Secure Sockets Layer
TLS = Transport Layer Security

Basically they do same jobs. The thing is there are few versions of SSL out
there (e.g. SSL v2, SSL v3). Both version of SSL are a bit old and
vulnerable to few attacks... So instead of naming it SSL v4 they named it
TLS ;-).

In depth there are quite a few differences making TLS more strong as
authentication...

You can actually choose in IE which protocols it will support. Unfortunately
TLS is by default disabled in including Windows 2003. You can enable it
manually in IE if you go to Tools -> Internet Options -> Advanced and scroll
all the way down.
It some hi-secure configuration recommendations they suggest (or recommend)
to disable SSL v2. I do agree with this -- but the problems is there are
still quite a few sites out there that will not work on any other version of
SSL but SSL v2...

--
Mike
Microsoft MVP - Windows Security

"Spin" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I understand what SSL is but what exactly is SSL/TLS?
>
> --
> Spin
>
>

A gentleman and a scholar you are, Mike. Thanks.

--
Spin

"Miha Pihler [MVP]" <mihap-(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> SSL = Secure Sockets Layer
> TLS = Transport Layer Security
>
> Basically they do same jobs. The thing is there are few versions of SSL
> out there (e.g. SSL v2, SSL v3). Both version of SSL are a bit old and
> vulnerable to few attacks... So instead of naming it SSL v4 they named it
> TLS ;-).
>
> In depth there are quite a few differences making TLS more strong as
> authentication...
>
> You can actually choose in IE which protocols it will support.
> Unfortunately TLS is by default disabled in including Windows 2003. You
> can enable it manually in IE if you go to Tools -> Internet Options ->
> Advanced and scroll all the way down.
> It some hi-secure configuration recommendations they suggest (or
> recommend) to disable SSL v2. I do agree with this -- but the problems is
> there are still quite a few sites out there that will not work on any
> other version of SSL but SSL v2...