6.4 TLS overview The main task of the TLS protocol is to create a secure communication channel between two parties: server Alice and client Bob. The only thing that RFC 8446 assumes is a reliable, in-order data stream on the underlying transport layer. The two most widely used transport layer protocols are the Transport Control…
6.4.3 TLS within the internet protocol stack TLS is located between the application layer and the transport layer in the internet protocol stack (a simplified version of the OSI protocol stack; see Figure 6.3). Figure 6.3: TLS within the internet protocol stack Because of this position, TLS provides security services (confidentiality, integrity, and authentication) to…
6.5.2 A typical TLS 1.2 connection The following figure shows the interplay of the TLS subprotocols in a typical TLS connection until TLS 1.2. The TLS 1.3 handshake is much more compact by eliminating one entire roundtrip from the earlier version. Figure 6.5: Overview of a typical TLS message flow without client authentication (up to…
6.6.2 Error handling in the TLS 1.3 handshake In applied cryptography – similar to most other engineering areas that require some form of dependability – it is generally a good practice to plan for failure. The TLS standard specifies how to deal with failures during the initial handshake. Figure 6.8: Message flow in TLS handshake…
