TLS

HTTP communication within iSHARE is encrypted using TLS versions up to their end of life (EOL). Currently this means TLS 1.2 or 1.3.

On this page a brief description of TLS is provided. For the most recent version of the specification click on this link.

Description

Transport Layer Security (TLS) is a cryptographic protocol that describes communication security for computer networks. The first version of TLS 1.0 is built upon and is an upgrade of SSL 3.0 (Secure Sockets Layer).

Differences and similarities between TLS and SSL

Both TLS and SSL provide means for data encryption and authentication between applications, machines and servers when data is sent through insecure network.

The differences between TLS and its forerunner 'Secure Sockets Layer' (SSL) are the addressed vulnerabilities. TLS for instance works with

• a wider variety of hash functions.

• more secure and stronger cipher suites, such as the Advanced Encryption Standard (AES) cipher suits which are integrated into TLS version 1.1.

• browser security warnings. TLS has more alert descriptions than SSL.