Skip to Content
Handbook of Information Security, Volume 1, Key Concepts, Infrastructure, Standards, and Protocols
book

Handbook of Information Security, Volume 1, Key Concepts, Infrastructure, Standards, and Protocols

by Hossein Bidgoli
January 2006
Beginner
1120 pages
72h 31m
English
Wiley
Content preview from Handbook of Information Security, Volume 1, Key Concepts, Infrastructure, Standards, and Protocols

Secure Sockets Layer (SSL)

Robert J. Boncella, Washburn University

Secure Communication Channels

Overview

Secure Channels

History of Secure Channels—SSLv1 to v3, PCT, TLS, STLP, and WTLS

Internetworking Concepts

Clients and Servers

Communication Paths

The OSI Model and TCP/IP

Cryptographic Concepts Used in SSL and TLS

Encryption

Key Sharing

Message Digest Algorithms

Digital Signatures

Certification Authorities

SSL Architecture

Overview

Connection Process Preview

Record Protocol

TLS—Transport Layer Security

SSL and TLS Protocols: Details

Cipher Suites and Master Secrets

Secure Internet Services Implemented Using SSL

Status of SSL

SSLv3 and TLS 1.0 and Commercial Use

Advantages, Disadvantages, Threats, and Alternatives to SSL/TLS

Glossary

Cross References

References

Further Reading

SECURE COMMUNICATION CHANNELS

Overview

This chapter provides an overview of how the SSL protocol and its variant the TLS protocol are used to establish and operate a secure communication channel. It is assumed that the readers of this chapter are nontechnical in their academic background. As a result some space will be spent in explaining the background concepts necessary for a full understanding of SSL and TLS. If the reader requires more technical detail (Boncella, 2000) is suggested.

This chapter has five major sections. First is a discussion of the need for and history of secure channels. Second is an overview of the internetworking concepts necessary to appreciate the details of SSL and TLS protocols. ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Information Security Handbook

Information Security Handbook

Darren Death
Network Protocols for Security Professionals

Network Protocols for Security Professionals

Yoram Orzach, Deepanshu Khanna

Publisher Resources

ISBN: 9780471648307Purchase book