Difference between SSL and TLS certificate

🔊 listen to this post Now in English

There are a number of differences between SSL and TLS since TLS is the successor to SSL. SSL refers to Secure Socket Layer, a protocol used to ensure the security of connections between a server and a client. This protocol uses security mechanisms such as cryptography and hashing to provide security services such as confidentiality, integrity, and authentication of endpoints to connections between a server and a client. TLS refers to Transport Layer Security, is the successor of SSL, which includes bugfixes and improvements over SSL. SSL, is a bit old, has a lot of known security bugs and so what is recommended to be using is the latest version of TLS, which is TLS 1.2. SSL came to versions 3.0 after the name was changed to TLS.

What is SSL?
SSL, which refers to Secure Socket Layer, is a protocol used to provide secure connections between a client and a server. A TCP connection can provide a link between a server and a server but can not provide services such as confidentiality, integrity, and endpoint authentication. Thus, SSL was introduced by Netscape in the early 1990s to provide these services. The first version of SSL, known as SSL 1.0, was never released to the public because it had many security vulnerabilities. However, in 1995, SSL 2.0, the best security that SSL 1.0, was introduced and, in 1996, SSL 3.0 was introduced with more improvements. The next versions of the SSL protocol appear under the name TLS.

SSL, which is implemented in the transport layer, can secure a protocol such as TCP by applying various security measures. On the cryptology It uses both asymmetric and symmetric encryption. First, using asymmetric key encryption, a symmetric session key Asymmetric key cryptography is also used for certificates used to authenticate the server. Then, the message authentication code, which uses various hashing techniques, is used to ensure integrity (identifying any unauthenticated changes to the actual data). Thus, a protocol like SSL allows to transmit information such as banking transactions and credit cards on the Internet. This is used to delivery is available., Web browsing, messaging and voice over IP.

SSL is now obsolete and poses many security issues, the use of which is currently poorly recommended. SSL 3.0 has recently been installed in many browsers, but now it is displayed in future releases, as well as in subsequent versions for security reasons.

What is TLS?
TLS, which refers to Transport Layer Security, is the successor to SSL. After SSL 3.0, the next version emerged as TLS 1.0 in 1999. Then, in 2006, an improved version named TLS 1.1 was introduced. Then, in 2008, further improvements and bugfixes were made and TLS 1.2 was introduced. Currently, TLS 1.2 is the latest version of Transport Layer Security available. Like SSL, TLS also provides security services such as confidentiality, integrity, and authentication of endpoints. Similarly, encryption, message authentication code, and digital certificates are used to provide these security services. TLS is immune to attacks such as the POODLE attack, which compromised the security of SSL 3.0.

The recommendation is to use the latest version of TLS, TLS 1.2 because it is the last to present the weakest security vulnerabilities. Any security system is not perfect and, over time, loopholes will be detected and in the future, TLS version 1.3, which will correct the detected errors, will be released. However, currently, TLS 1.2 is the most secure and, in all mainstream browsers, it is enabled by default.

What is the difference between SSL and TLS?
TLS is the successor of SLS. SLS was introduced in the 1990s and three versions were introduced, namely SSL 1.0, SSL 2.0 and SSL 3.0. After that, in 1999, the next version of SSL was named TLS 1.0. Then, TLS 1.1 has been introduced and the latest current version is TLS 1.2.
SSL has a lot of bugs and is susceptible to known attacks as TLS. In the latest versions of TLS, most bugs have been fixed and are immune to attacks.
TLS has new features and supports new algorithms over SSL.
With the attack called POODLE attack, the use of SSL has become very vulnerable and, in newer versions of web browsers, SSL will be disabled by default. However, in all browsers, TLS is enabled by default.
TLS supports new suites of authentication and key exchange algorithms such as ECDH-RSA, ECDH-ECDSA, PSK and SRP.
Message authentication code algorithm suites such as HMAC-SHA256 / 384 and AEAD are available in the most recent versions of TLS, but not in SSL.
SSL was developed and published under Netscape. However, TLS is under the Internet Engineering Task Force as a standard protocol and is therefore available under RFC.
There are differences in the implementation of the protocol, such as key exchange and key derivation.