Transport Layer Security (TLS)

{
  "id": "MLC-T-CYB-004403",
  "term": "Transport Layer Security (TLS)",
  "field": "Cybersecurity",
  "definition": "1. An authentication and security protocol that is widely implemented in browsers and web servers. TLS provides confidentiality, certificate-based authentication of the receiving (server) endpoint, and certificate-based authentication of the originating (client) endpoint. TLS is specified in [RFC8446] and [SP800-52].\n\n2. Provides privacy and data integrity between two communicating applications. It is designed to encapsulate other protocols, such as HTTP. TLS v1.0 was released in 1999, providing slight modifications to SSL 3.0.\n\n3. A security protocol providing privacy and data integrity between two communicating applications. The protocol is composed of two layers: the TLS Record Protocol and the TLS Handshake Protocol.\n\n4. Provides privacy and reliability between two communicating applications. It is designed to encapsulate other protocols, such as HTTP. SSL v3.0 was released in 1996. It has been succeeded by IETF's TLS.\n\n5. See Transport Layer Security (TLS).\n\n6. An authentication and security protocol widely implemented in browsers and web servers. TLS is defined by RFC 5246. TLS is similar to the older SSL protocol, and TLS 1.0 is effectively SSL version 3.1. NIST SP 800-52, Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations, specifies how TLS is to be used in government applications.\n\n7. An authentication and security protocol that is widely implemented in browsers and web servers. TLS is defined by RFC 5246 and RFC 8446. TLS is similar to the older Secure Sockets Layer (SSL) protocol, and TLS 1.0 is effectively SSL version 3.1. [NIST SP 800-52] specifies how TLS is to be used in government applications.\n\n8. An authentication and security protocol widely implemented in browsers and web servers. TLS is defined by RFC 5246. TLS is similar to the older SSL protocol, and TLS 1.0 is effectively SSL version 3.1. NIST SP 800-52, Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations [NIST SP 800-52], specifies how TLS is to be used in government applications.\n\n9. An authentication and security protocol widely implemented in browsers and web servers. TLS is defined by RFC 5246 and RFC 8446.\n\n10. An authentication and encryption protocol widely implemented in browsers and Web servers. HTTP traffic transmitted using TLS is known as HTTPS.\n\n11. An authentication and security protocol widely implemented in browsers and web servers. SSL has been superseded by the newer Transport Layer Security (TLS) protocol; TLS 1.0 is effectively SSL version 3.1.\n\n12. An authentication and security protocol widely implemented in browsers and web servers. TLS is defined by [RFC 2246], [RFC 3546], and [RFC 5246]. TLS is similar to the older Secure Sockets Layer (SSL) protocol, and TLS 1.0 is effectively SSL version 3.1. NIST SP 800-52, Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations specifies how TLS is to be used in government applications.",
  "abbreviation": "TLS",
  "synonyms": [
    "Secure Sockets Layer (SSL)"
  ],
  "references": [
    "NIST SP 800-63-4",
    "NIST SP 800-95 from IETF RFC 2246",
    "CNSSI 4009-2015 from IETF RFC 5246 (Adapted); CNSSI 4009-2022 from RFC 8446 (adapted); NIST SP 1800-21B from CNSSI 4009-2015, CNSSI 4009-2022",
    "NIST SP 800-95 from SSL 3.0 specification",
    "NIST SP 800-63-3 [Superseded]",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 1800-16B; NIST SP 1800-16C; NIST SP 1800-16D",
    "NISTIR 7711",
    "NIST SP 800-63-2 [Superseded]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/transport-layer-security-tls/"
}