2021년 2월 17일 (수) 08:05에 Pythagoras0님의 편집

2021-02-17T08:05:21Z

Pythagoras0: /* 노트 */ 새 문단

2020-12-21T11:06:08Z

노트: 새 문단

새 문서

== 노트 ==

===위키데이터===
* ID : [https://www.wikidata.org/wiki/Q206494 Q206494]
===말뭉치===
# Transport Layer Security (TLS) is an encryption protocol that authenticates the communication of two computing applications.<ref name="ref_09c13098">[https://blog.malwarebytes.com/glossary/transport-layer-security-tls/ Transport Layer Security (TLS) - Malwarebytes Labs]</ref>
# The purpose of the TLS interface is to make the current software crypto library, mbed TLS, easy to replace with an alternative implementation for TLS protocol negotiation and cryptographic primitives.<ref name="ref_093d0bd1">[https://docs.aws.amazon.com/freertos/latest/userguide/security-tls.html Transport Layer Security]</ref>
# The TLS interface can be swapped out without any changes required to the SSL interface.<ref name="ref_093d0bd1" />
# The TLS interface is optional because you can choose to interface directly from SSL into a crypto library.<ref name="ref_093d0bd1" />
# For more information about porting the TLS interface, see Porting the TLS Library in the FreeRTOS Porting Guide.<ref name="ref_093d0bd1" />
# Transport Layer Security (TLS), like its predecessor Secure Sockets Layer (SSL), is a cryptographic protocol that provides communications security over a computer network.<ref name="ref_6ec63e38">[https://www.whitehatsec.com/glossary/content/transport-layer-security-tls Transport Layer Security (TLS)]</ref>
# Transport Layer Security has superseded Secure Sockets Layer (SSL), as it is a more secure and efficient cryptographic protocol for securing privacy and data integrity throughout a computer network.<ref name="ref_6ec63e38" />
# Unlike SSL, TLS has key material generation, supported cipher suits, and message authentication.<ref name="ref_6ec63e38" />
# See Secure Sockets Layer (SSL) to read about Transport Layer Security’s predecessor.<ref name="ref_6ec63e38" />
# There’s an important update to these security protocols in TLS that consumer and businesses need to know alike.<ref name="ref_b787e7b0">[https://www.proteloinc.com/blog/transport-layer-security-tls-is-critical-for-netsuite-users/ Transport Layer Security (TLS) is Critical for NetSuite Users]</ref>
# The latest PCI compliance standards require that any site accepting credit card payments uses TLS 1.2 after June 30, 2018.<ref name="ref_b787e7b0" />
# Even though you have some time before TLS 1.2 is required for PCI compliance, most internet services are moving to require support of TLS 1.2 earlier.<ref name="ref_b787e7b0" />
# Services such as PayPal, Authorize.net, Stripe, UPS, FedEx, and many others already support TLS1.2, and have announced that they will eventually refuse TLS 1.0 connections.<ref name="ref_b787e7b0" />
# On the other hand, TLS encryption can also help protect web applications from attacks such as data breaches.<ref name="ref_6ae4395d">[https://www.proxyclick.com/blog/transport-layer-security-basics Transport Layer Security (TLS): The Basics]</ref>
# SSL certificates are created to enable websites to move from HTTP to the more recommended HTTPS by making SSL/TLS encryption possible.<ref name="ref_6ae4395d" />
# You can obtain a valid SSL certificate only from an authorized third-party certificate authority (CA).<ref name="ref_6ae4395d" />
# It provides X.509 certificates (standard format certificates used in many internet protocols) for TLS encryption - and it’s free of charge.<ref name="ref_6ae4395d" />
# The terms Secure Sockets Layer (SSL) and TLS have traditionally been used interchangeably.<ref name="ref_72842e63">[https://www.cyber.gov.au/acsc/view-all-content/guidance/transport-layer-security Transport Layer Security]</ref>
# Transport Layer Security (TLS) 1.2 is the successor to Secure Sockets Layer (SSL) used by endpoint devices and applications to authenticate and encrypt data securely when transferred over a network.<ref name="ref_1e76f007">[https://www.accuenergy.com/support/reference-directory/tls-transport-layer-security-protocol/ TLS 1.2 Transport Layer Security Protocol]</ref>
# TLS protocol is a widely accepted standard used by devices such as computers, phones, IoTs, meters, and sensors.<ref name="ref_1e76f007" />
# Websites have an option to use TLS or SSL to encrypt data communication between their servers and the web client base on a set of rules in their cypher suite.<ref name="ref_1e76f007" />
# SSL was created by Netscape in 1994 with version 1.0 never released to the public due to design flaws.<ref name="ref_1e76f007" />
# Transport Layer Security (TLS) is a security protocol that encrypts email to protect its privacy.<ref name="ref_9dd80f2a">[https://support.google.com/a/answer/2520500?hl=en Require mail to be transmitted via a secure (TLS) connection]</ref>
# To create a secure connection, both the sender and recipient must use TLS.<ref name="ref_9dd80f2a" />
# In the Compliance section, point to Secure transport (TLS) compliance and click Configure.<ref name="ref_9dd80f2a" />
# You must create a domain or address list to enforce TLS compliance for any inbound or outbound messages.<ref name="ref_9dd80f2a" />
# In the early 1990s, Netscape developed the first transport layer protocol designed for network security -- Secure Sockets Layer (SSL).<ref name="ref_60f0ebef">[https://www.twilio.com/docs/glossary/what-is-transport-layer-security-tls What is TLS?]</ref>
# The internet widely adopted this protocol and it saw numerous iterations over the next few years, until it was completely overhauled to become TLS in 2006.<ref name="ref_60f0ebef" />
# As of June 2019, the Twilio REST API only supports connections that use TLS v1.2.<ref name="ref_60f0ebef" />
# Find tips on how to upgrade your environment to support the latest TLS requirements here.<ref name="ref_60f0ebef" />
# TLS evolved from its predecessor, Secure Sockets Layer (SSL); the names TLS and SSL are often used interchangeably, though the latter is deprecated.<ref name="ref_dd8fa1ea">[https://tesmail.org/security/tls/ Transport Layer Security (TLS)]</ref>
# Even today, while most services have moved to the latest versions of the TLS protocol, still many of them use insecure algorithms and cipher suites, or keys that are too short.<ref name="ref_dd8fa1ea" />
# Finally, TLS in itself does not provide any certainty on the actual identity of the parties in the communication.<ref name="ref_dd8fa1ea" />
# TLS is nowadays used for protecting web browsing, email, messaging, voice over IP, industrial automation systems, etc.<ref name="ref_2873cf6d">[https://xiphera.com/tls.php Peace of mind in a dangerous world.]</ref>
# When a TLS connection is opened, a handshake protocol authenticates the server (and optionally the client) and derives shared secret keys.<ref name="ref_2873cf6d" />
# TLS 1.3 client-side IP Core is based on FPGA technology.<ref name="ref_2873cf6d" />
# The TLS 1.3 IP Core is optimized for low-area footprint, targeting high-volume FPGAs, which makes it ideal for industrial applications.<ref name="ref_2873cf6d" />
# By now, you must have stumbled upon alien-like concepts such as “SSL”, “TLS”, “handshake protocol”, “AES”, or “MD5-SHA-1”.<ref name="ref_6cb722c0">[https://heimdalsecurity.com/blog/what-is-transport-layer-security/ What is Transport Layer Security (TLS)? Strengths and Vulnerabilities Explained]</ref>
# that it was a ‘necessary evil’, in the sense that its creators wanted to find a way to overcome the shortcomings of SSL (Secure Sockets Layers), TLS’s predecessor.<ref name="ref_6cb722c0" />
# – Research into the transport layer security variant begins.<ref name="ref_6cb722c0" />
# 1995 – SSL version 2.0 is released.<ref name="ref_6cb722c0" />
# ALTS is a custom transport layer security solution that we use at Google.<ref name="ref_3ff738c2">[https://cloud.google.com/security/encryption-in-transit/application-layer-transport-security Application Layer Transport Security]</ref>
# We have tailored ALTS to our production environment, so there are some tradeoffs between ALTS and the industry standard, TLS.<ref name="ref_3ff738c2" />
# Many applications, from web browsers to VPNs, rely on secure communication protocols, such as TLS (Transport Layer Security) and IPSec, to protect data in transit3.<ref name="ref_3ff738c2" />
# It may seem unusual for Google to use a custom security solution such as ALTS when the majority of Internet traffic today is encrypted using TLS.<ref name="ref_3ff738c2" />
# SSL was developed by Netscape in the 90’s and was a preliminary, and exploratory means to define secure communication.<ref name="ref_bb017bde">[https://site.ieee.org/ocs-cssig/?page_id=658 Transport Layer Security (TLS)]</ref>
# SSL and TLS1.0 and TLS1.1 have been included as reference material.<ref name="ref_bb017bde" />
# Articles which are the TLS standard or describe the standard.<ref name="ref_bb017bde" />
# Here's how TLS works, explained in plain English.<ref name="ref_aa6ead9d">[https://www.freecodecamp.org/news/what-is-tls-transport-layer-security-encryption-explained-in-plain-english/ What is TLS? Transport Layer Security Encryption Explained in Plain English]</ref>
# Thus when a TLS handshake begins with an asymmetric exchange, the client and server will use this initial communication to establish a shared secret, sometimes called a session key.<ref name="ref_aa6ead9d" />
# A TLS handshake may use asymmetric cryptography or other cipher suites to establish the shared session key.<ref name="ref_aa6ead9d" />
# The TLS protocol serves a very important purpose in your everyday life.<ref name="ref_aa6ead9d" />
# TLS secures client-server sessions through strong cryptographic methods against eavesdropping (eavesdropper), tampering, and forgery.<ref name="ref_2d6ecb74">[https://link.springer.com/10.1007%2F978-1-4419-5906-5_234 Transport Layer Security (TLS)]</ref>
# An Internet Engineering Task Force (IETF) standard, TLS is widely utilized in common applications such as web browsing, instant messaging, email communications, and voice over IP (VoIP).<ref name="ref_452e1945">[https://www.zaginteractive.com/insights/june-2020/protecting_your_financial_website_with_tls Protecting your Financial Website with Transport Layer Security (TLS)]</ref>
# Assisting with website security, TLS encryption helps protect web applications from data breaches and DDoS attacks.<ref name="ref_452e1945" />
# With a correct implementation, TLS makes it so others can only infer the connection endpoints, type of encryption, as well as the frequency and an approximate amount of data sent.<ref name="ref_452e1945" />
# Critically, TLS ensures that outsiders cannot read or modify any of the actual data being communicated.<ref name="ref_452e1945" />
# SSL v3.0 was released in 1996.<ref name="ref_c3856d9c">[https://csrc.nist.gov/glossary/term/Transport_Layer_Security Transport Layer Security (TLS) - Glossary]</ref>
# TLS is defined by RFC 5246.<ref name="ref_c3856d9c" />
# Transport Layer Security (TLS) mean?<ref name="ref_edb72d0d">[https://www.techopedia.com/definition/4143/transport-layer-security-tls What is Transport Layer Security (TLS)?]</ref>
# Transport Layer Security (TLS) is a protocol for the establishment and use of a cryptographically secured connection between two computer systems, a client and a server.<ref name="ref_b8779fef">[https://english.ncsc.nl/publications/publications/2019/juni/01/it-security-guidelines-for-transport-layer-security-tls IT Security Guidelines for Transport Layer Security (TLS)]</ref>
# TLS is also known by its older name, Secure Sockets Layer (SSL).<ref name="ref_b8779fef" />
# TLS is applied in a large number of contexts.<ref name="ref_b8779fef" />
# They help an organisation choose between all possible configurations of TLS to arrive at a secure configuration.<ref name="ref_b8779fef" />
# This cheat sheet provides guidance on how to implement transport layer protection for an application using Transport Layer Security (TLS).<ref name="ref_b09eb68a">[https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Protection_Cheat_Sheet.html Transport Layer Protection]</ref>
# TLS is used by many other protocols to provide encryption and integrity, and can be used in a number of different ways.<ref name="ref_b09eb68a" />
# Socket Layer (SSL) was the original protocol that was used to provide encryption for HTTP traffic, in the form of HTTPS.<ref name="ref_b09eb68a" />
# There were two publicly released versions of SSL - versions 2 and 3.<ref name="ref_b09eb68a" />
# Transport layer security (TLS for short) refers to a protocol that aims to offer authentication, data integrity and privacy during the communication between two different computer applications.<ref name="ref_428df71f">[https://blog.logsign.com/what-is-transport-layer-security/ What is Transport Layer Security?]</ref>
# There are numerous advantages of opting for transport layer security.<ref name="ref_428df71f" />
# If your site is secured by the immense power of the transport layer security, you will be perceived as a trustable brand that puts the emphasis on the safety and security of your customers.<ref name="ref_428df71f" />
# The alert system of transport layer security is far more advanced and reactive than its predecessors.<ref name="ref_428df71f" />
# TLS is a cryptographic protocol that provides end-to-end security of data sent between applications over the Internet.<ref name="ref_4a528600">[https://medium.com/@jonathansychan/tls-transport-layer-security-1ae06dbc6fae TLS — transport layer security. The internet is full of vulnerabilities…]</ref>
# During a TLS handshake, the two communicating sides exchange messages to acknowledge each other, verify each other, establish the encryption algorithms they will use, and agree on session keys.<ref name="ref_4a528600" />
# Methodologies/algorithms that help facilitate TLS to keep in mind are RSA (Rivest–Shamir–Adleman), ECDH (Elliptic-curve Diffie–Hellman) and AES (advanced encryption standards).<ref name="ref_4a528600" />
# Transport Layer Securities (TLS) are designed to provide security at the transport layer.<ref name="ref_47545ede">[https://www.geeksforgeeks.org/transport-layer-security-tls/ Transport Layer Security (TLS)]</ref>
# TLS was derived from a security protocol called Secure Service Layer (SSL).<ref name="ref_47545ede" />
# TLS/SSL can help to secure transmitted data using encryption.<ref name="ref_47545ede" />
# TLS/SSL works with most web browsers, including Microsoft Internet Explorer and on most operating systems and web servers.<ref name="ref_47545ede" />
# TLS evolved from Secure Socket Layers (SSL) which was originally developed by Netscape Communications Corporation in 1994 to secure web sessions.<ref name="ref_437fdca4">[https://www.internetsociety.org/deploy360/tls/basics/ What is TLS & How Does it Work?]</ref>
# TLS was first specified in RFC 2246 in 1999 as an applications independent protocol, and whilst was not directly interoperable with SSL 3.0, offered a fallback mode if necessary.<ref name="ref_437fdca4" />
# However, SSL 3.0 is now considered insecure and was deprecated by RFC 7568 in June 2015, with the recommendation that TLS 1.2 should be used.<ref name="ref_437fdca4" />
# It should be noted that TLS does not secure data on end systems.<ref name="ref_437fdca4" />
# For SSL certificates, the common name is the DNS host name of the site to be secured.<ref name="ref_3800b608">[https://www.websecurity.digicert.com/security-topics/what-is-ssl-tls-https What is SSL, TLS and HTTPS?]</ref>
# Secure server Server that protects host web pages using SSL or TLS.<ref name="ref_3800b608" />
# In addition, user information is encrypted by the user's web browser's SSL protocol before being sent across the Internet.<ref name="ref_3800b608" />
# SSL Stands for secure sockets layer.<ref name="ref_3800b608" />
# Digital certificates are necessary when running HTTPS using SSL.<ref name="ref_808a19f1">[https://docs.oracle.com/cd/E19798-01/821-1841/bnbxc/index.html Transport-Layer Security (The Java EE 6 Tutorial)]</ref>
# For more information on transport-layer security, see Establishing a Secure Connection Using SSL.<ref name="ref_808a19f1" />
# Transport Layer Security (TLS) is an encryption protocol that is used for data transmission on the Internet.<ref name="ref_ccef3c3d">[https://en.ryte.com/wiki/Transport_Layer_Security_(TLS) What is transport layer security?]</ref>
# Transport Layer Security is one of the most widely used encryption protocols.<ref name="ref_ccef3c3d" />
# TLS is used primarily in areas where sensitive data is concerned, such as online banking, customer data storage, passwords, and digital communications.<ref name="ref_ccef3c3d" />
# The development of TLS went hand in hand with the development of the Internet.<ref name="ref_ccef3c3d" />
# The security of any connection using Transport Layer Security (TLS) is heavily dependent upon the cipher suites and security parameters selected.<ref name="ref_db131171">[https://developer.mozilla.org/en-US/docs/Web/Security/Transport_Layer_Security Transport Layer Security - Web security]</ref>
# The Transport Layer Security (TLS) protocol is the standard for enabling two networked applications or devices to exchange information privately and robustly.<ref name="ref_db131171" />
# Applications that use TLS can choose their security parameters, which can have a substantial impact on the security and reliability of data.<ref name="ref_db131171" />
# When HTTPS was introduced, it was based on Secure Sockets Layer (SSL) 2.0, a technology introduced by Netscape.<ref name="ref_db131171" />
# Transport Layer Security have led to breaches.<ref name="ref_5728d322">[https://www.networkworld.com/article/2303073/lan-wan-what-is-transport-layer-security-protocol.html What is Transport Layer Security (TLS)?]</ref>
# TLS is a cryptographic protocol that provides end-to-end communications security over networks and is widely used for internet communications and online transactions.<ref name="ref_5728d322" />
# TLS’s predecessor, secure socket layer (SSL) was developed by Netscape in 1995.<ref name="ref_5728d322" />
# SSL version 1.0 and 2.0 contained many security flaws that prompted a complete redesign of the protocol.<ref name="ref_5728d322" />
# Since the early days of the web, the SSL protocol and its descendent, TLS, have provided the encryption and security that make modern internet commerce possible.<ref name="ref_f0872c53">[https://www.csoonline.com/article/3246212/what-is-ssl-tls-and-how-this-encryption-protocol-works.html What is SSL, TLS? And how this encryption protocol works]</ref>
# Secure Sockets Layer, or SSL, was the original name of the protocol when it was developed in the mid-1990s by Netscape, the company that made the most popular Web browser at the time.<ref name="ref_f0872c53" />
# SSL 1.0 was never released to the public, and SSL 2.0 had serious flaws.<ref name="ref_f0872c53" />
# When the next version of the protocol was released in 1999, it was standardized by the Internet Engineering Task Force (IETF) and given a new name: Transport Layer Security, or TLS.<ref name="ref_f0872c53" />
# TLS provides an end-to-end secure channel between two network end points.<ref name="ref_40f7b05b">[https://www.sciencedirect.com/topics/computer-science/transport-layer-security Transport Layer Security - an overview]</ref>
# TLS was originally developed under the name Secure Sockets Layer (SSL) by Netscape Corporation for the Netscape web browser, but was later standardized by the IETF as TLS.<ref name="ref_40f7b05b" />
# Although the name is now officially TLS, it is still widely known as SSL.<ref name="ref_40f7b05b" />
# TLS consists of several different layers and protocols.<ref name="ref_40f7b05b" />
# Transport Layer Security (TLS) is a protocol that provides authentication, privacy, and data integrity between two communicating computer applications.<ref name="ref_1040bc22">[https://searchsecurity.techtarget.com/definition/Transport-Layer-Security-TLS What is Transport Layer Security (TLS)?]</ref>
# TLS evolved from Netscape's Secure Sockets Layer (SSL) protocol and has largely superseded it, although the terms SSL or SSL/TLS are still sometimes used.<ref name="ref_1040bc22" />
# The Internet Engineering Task Force (IETF) officially took over the SSL protocol to standardize it with an open process and released version 3.1 of SSL in 1999 as TLS 1.0.<ref name="ref_1040bc22" />
# The protocol was renamed TLS to avoid legal issues with Netscape, which developed the SSL protocol as a key feature part of its original web browser.<ref name="ref_1040bc22" />
# Transport Layer Security (TLS) When the SSL protocol was standardized by the IETF, it was renamed to Transport Layer Security (TLS).<ref name="ref_2cf55511">[https://hpbn.co/transport-layer-security-tls/ Networking 101: Transport Layer Security (TLS)]</ref>
# Many use the TLS and SSL names interchangeably, but technically, they are different, since each describes a different version of the protocol.<ref name="ref_2cf55511" />
# SSL 2.0 was the first publicly released version of the protocol, but it was quickly replaced by SSL 3.0 due to a number of discovered security flaws.<ref name="ref_2cf55511" />
# Because the SSL protocol was proprietary to Netscape, the IETF formed an effort to standardize the protocol, resulting in RFC 2246, which was published in January 1999 and became known as TLS 1.0.<ref name="ref_2cf55511" />
# Abstract This document specifies Version 1.2 of the Transport Layer Security (TLS) protocol.<ref name="ref_9dc41c4c">[https://tools.ietf.org/html/rfc5246 The Transport Layer Security (TLS) Protocol Version 1.2]</ref>
# The TLS protocol provides communications security over the Internet.<ref name="ref_9dc41c4c" />
# The keys for this symmetric encryption are generated uniquely for each connection and are based on a secret negotiated by another protocol (such as the TLS Handshake Protocol).<ref name="ref_9dc41c4c" />
# The TLS Record Protocol is used for encapsulation of various higher- level protocols.<ref name="ref_9dc41c4c" />
# Transport Layer Security (TLS), and its now-deprecated predecessor, Secure Sockets Layer (SSL), are cryptographic protocols designed to provide communications security over a computer network.<ref name="ref_18556f13">[https://en.wikipedia.org/wiki/Transport_Layer_Security Transport Layer Security]</ref>
# The TLS protocol aims primarily to provide privacy and data integrity between two or more communicating computer applications.<ref name="ref_18556f13" />
# TLS supports many different methods for exchanging keys, encrypting data, and authenticating message integrity (see below).<ref name="ref_18556f13" />
# Attempts have been made to subvert aspects of the communications security that TLS seeks to provide, and the protocol has been revised several times to address these security threats.<ref name="ref_18556f13" />
===소스===
<references />

전송 계층 보안 - 편집 역사

2021년 2월 17일 (수) 08:05에 Pythagoras0님의 편집

Pythagoras0: /* 메타데이터 */ 새 문단

Pythagoras0: /* 노트 */ 새 문단

@@ 132번째 줄: / 132번째 줄: @@
   <references />
-== 메타데이터 ==
+==메타데이터==
 ===위키데이터===
 * ID :  [https://www.wikidata.org/wiki/Q206494 Q206494]

← 이전 판		2020년 12월 26일 (토) 12:16 판
131번째 줄:		131번째 줄:
	===소스===		===소스===
	<references />		<references />
		+
		+	== 메타데이터 ==
		+
		+	===위키데이터===
		+	* ID : [https://www.wikidata.org/wiki/Q206494 Q206494]