Security at the Transport Layer Secure Socket Layer (SSL)

• Developed by Netscape to provide security in WWW browsers and servers

• SSL is the basis for the Internet standard protocol – Transport Layer Security (TLS) protocol (compatible with SSLv3)

• Key idea: Connections and Sessions

  • A SSL session is an association between two peers
  • An SSL connection is the set of mechanisms used to transport data in an SSL session