From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts
Unlock the full course today
Join today to access over 23,200 courses taught by industry experts.
TLS and SSL
From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts
TLS and SSL
Digital certificates allow for the secure exchange of public encryption keys over, otherwise, untrusted networks. Transport encryption technology, such as Transport Layer Security or TLS uses those certificates to facilitate secure communication over public networks. Let's explore TLS by describing the process that two systems follow when they wish to set up an encrypted session protected by TLS. First, the client sends a request to the server asking that the server initiate a secure session. This request includes a list of cipher suites supported by the client. Now, it's important to understand that TLS is only a protocol that uses other cryptographic algorithms. TLS is not a cryptographic algorithm itself. Therefore, you can't encrypt something with TLS. You can use TLS to apply other encryption algorithms. The listing of cipher suites sent by the client to the server is a laundry list of the encryption algorithms, hash functions, and other cryptographic details that the client…