SSL/TLS

SSL stands for Secure Socket Layer, and it is used to establish an encrypted link between a web server and a web browser to enable secure communications. TLS, in simple terms, is a newer version of the SSL protocol.

In short, SSL/TLS are a group of security protocols that provide secure communication over an insecure network. This is further illustrated in the following use cases.

Scenario 1 – A man-in-the-middle attack–storing credentials

In the following diagram, we can see that a user is sending their username and password in plaintext to a Web Server for authentication over a network.

There is an Attacker sitting between them doing a MITM attack and storing all the credentials he finds over the network...