Understanding the TLS protocol
TLS is a general-purpose protocol that provides secure communication. The latest version of the TLS protocol at the time of writing is 1.3. TLS provides the following aspects of security:
- Privacy or confidentiality of transmitted user data, using symmetric encryption. It is computationally infeasible to decrypt and read the transmitted user data. Using the term user data here and later, I mean data that the users of the TLS protocol, the sender, and the receiving party exchange with each other, as opposed to service data of the TLS protocol needed for the protocol to function.
- Integrity and authenticity of transmitted user data, protection against tampering, using authenticated encryption or Message Authentication Code (MAC). It is computationally infeasible to alter the transmitted user data without the receiving party detecting it. Starting from TLS 1.3, authenticated encryption is mandatory.
- Peer identity proof and protection against...
