Linux Hardening in Hostile Networks: Server Security from TLS to Tor

Appendix B. SSL/TLS

Throughout the book, I have explained how to protect various services with TLS. Instead of bogging you down with the details of how TLS works in almost every chapter, I’ve decided to put those details here as a quick reference in case you are curious about how TLS works, how it protects you, its limitations, some of its security risks, and how to mitigate them.

What Is TLS?

Transport Layer Security (TLS) is a protocol you can use to protect network communications from eavesdropping and other types of attacks. It is an update to the Secure Sockets Layer (SSL) protocol that preceded it, and often people (including those who work in security) still refer to both collectively as “SSL” or use the terms “SSL” and “TLS” interchangeably. ...