Monday, December 9, 2013

What's the difference between SSL, TLS, and HTTPS?

Ref : http://security.stackexchange.com/questions/5126/whats-the-difference-between-ssl-tls-and-https

TLS is the new name for SSL. Namely, SSL protocol got to version 3.0; TLS 1.0 is "SSL 3.1". TLS versions currently defined include TLS 1.1 and 1.2. Each new version adds a few features and modifies some internal details. We sometimes say "SSL/TLS".
HTTPS is HTTP-within-SSL/TLS. SSL (TLS) establishes a secured bidirectional tunnel for arbitrary binary data between two hosts. HTTP is a protocol for sending requests and receiving answers, each request and answer consisting in detailed headers and (possibly) some content. HTTP is meant to run over a bidirectional tunnel for arbitrary binary data; when that tunnel is a SSL/TLS connection, then the whole is called "HTTPS".
  • SSL= Secure Sockets Layer
  • TLS = Transport Layer Security
  • HTTPS = HyperText Transfer Protocol Secured


No comments:

Post a Comment