Transport Layer Security (TLS)
Overview
TLS (Transport Layer Security) is the successor to SSL (Secure Sockets Layer). It encrypts data between client and server, predominantly securing web traffic (HTTPS), email (STARTTLS), and API communications.
Key Security Properties
- Confidentiality / Encryption: Symmetric encryption (AES-GCM, ChaCha20-Poly1305) prevents eavesdropping.
- Authentication: Asymmetric public-key cryptography (X.509 certificates, RSA, ECDSA) verifies the server’s identity.
- Integrity: Cryptographic message authentication (HMAC, AEAD) prevents tampering in transit.
OSI Layer Context
- Operates primarily at OSI Layer 6: Presentation Layer, securing protocols at OSI Layer 7: Application Layer (such as HTTP becoming HTTPS), and running on top of OSI Layer 4: Transport Layer (TCP).