Practical Network Scanning

TLS versus SSL

Both TLS and SSL are security frameworks that provide data encryption and authentication for web based applications to ensure data protection. An SSL and TLS handshake is a mechanism for web based applications which takes place just after the TCP handshake occurs between a client and a server. The handshake doesn’t encrypt anything on its own, but actually negotiates for a shared secret and encryption type which both sides agree on.

In the diagram below, we can see that just after the TCP and SSL handshake starts, a secure client sends a 'hello' message to the server with a supported set of ciphers. The server responds with a top support cipher and also shares its certificate with the public key:  

Let's take a look  at Wireshark ...