Français
8. Conclusion
TLS fulfills the security objectives expected of it: it is capable of ensuring mutual authentication of actors, confidentiality, and the spatial and temporal integrity of transactions. Naturally, this does not come without interference from the environment: to sum up the essentials, the application that embeds it and the certificate management policy are of critical importance if a reasonable level of security is to be achieved.
This is why TLS can be said to be a secure protocol in terms of its construction and mechanisms, but weak in terms of authentication: unable to do better than the Internet, it offers only passable resistance to active attacks. Of course, this is a theoretical verdict, and the reality leaves relatively few opportunities for attackers to take advantage of it. After several years of service and widespread use, SSL/TLS has not suffered any devastating...
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Conclusion
Bibliography
References
Standardization
- Information technology – Open Systems Interconnection – The Directory: Overview of concepts, models and services - ITU-T Rec. X.500 - 02-01
- Information technology – Open Systems Interconnection – The Directory: Public-key and attribute certificate frameworks - ITU-T Rec. X.509 - 03-00
- Information Technology – Open Systems Interconnection (OSI) – The directory: an overview of concepts, models and services -...
Organizations
Internet Engineering Task Force (IETF) http://www.ietf.org
International Telecommunication Union – Telecom Standardization (ITU-T) http://www.itu.int/ITU-T
Software
OpenSSL http://www.openssl.org
The Ultimate Scientific and Technical Reference
