Page 201 - CISSO_Prep_ Guide

Transport Layer Encryption

The protection of data at the transport layer is done using SSL
(Secure Socket Layer) or TLS (Transport Layer Security). TLS
was based on an earlier version of SSL.

SSL is used to create a secure tunnel from a client to a web
server - often for e-commerce and other secure transactions. In
most cases today, SSL is used as reverse authentication. Simply
put, the webserver responds to a request from a client by
proving to the client that the client is at the correct web server.
For example, when a client logs in to a bank's website, the bank
sends a certificate to the client that authenticates the identity of
the webserver. The certificate also contains the public key of the