TLS Standards Activities

Beyond Netscape’s own “standards” activities, SSL has also been the subject of ongoing standards efforts within the Internet’s technical standards-setting bodies.

In 1995, the IETF laid the groundwork for the adoption of SSL as part of a new Internet standard for Transport Layer Security (TLS). A draft of the protocol by Tim Dierks and Christopher Allen at Consensus Development was published on March 6, 1997.

TLS is very similar to SSL 3.0, with a few important differences. Instead of using MD5, TLS uses the HMAC secure keyed message digest function. TLS also has a slightly different cipher suite from SSL 3.0.

Get Web Security and Commerce now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.