TLS (Transport Layer Security): what it is and how it works

Today we explain what the Transport Layer Security (TLS) or Transport Layer Security: the encryption protocol that ensures communications on the Internet.

The concern of users about the loss of privacy on the Internet is real: every day we hear stories about theft of information, photos, relevant documents ... That is why it is essential to be safe when you browse the network and when you interact on it. From viewing pages, downloading documents, and communicating via email - security is paramount.

Some ago posts, we inform you of the SSL certificate, data encryption in the exchange of data between web page and users, perfect for the e-commerce, protection of confidential data such as credit cards, private information or intranets. We want you to learn about TLS today.

TLS is the next generation of the SSL Certificate: it allows and guarantees the exchange of data in a secure and private environment between two entities, the user and the server, through applications such as HTTP, POP3, IMAP, SSH, SMTP or NNTP. We refer to TLS as the evolution of SSL since it is based on the latter certificate and works in a very similar way, basically: it encrypts the shared information.

How do you encrypt it? Through two protocols in different layers: the authentication protocol (called TLS Record Protocol) and the mutual agreement (also known as TLS Handshake Protocol).

to)  Record: Authentication is carried out so that data transmission is through a connection private Y reliable (the encryption and integrity of the sender-receiver is negotiated)

b) Handshake- The message is negotiated securely. In each message the protocol is specified in a field (called content_type) and is encrypted and packaged with an authentication code (or MAC).

Therefore, in the TLS protocol, a secure and encrypted channel is carried out between client and server where negotiate cryptography of the message, authenticate the encryption keys and a transmission safe.

The TLS protocol is distinguished by security with interoperability (encrypted data transmissions from different applications such as HTTP, which becomes HTTPS).