Minisoft Terminal Emulators include
support for OpenSSL to provide Secure Sockets Layer (SSL v2/v3) and
Transport Layer Security (TLS v1) protocols.
SSH
- Developed by SSH Communications Security Ltd., Secure Shell is a
program to log into another computer over a network, to execute
commands in a remote machine, and to move files from one machine to
another. It provides strong authentication and secure communications
over insecure channels. It is a replacement for rlogin, rsh, rcp, and
rdist.
SSH protects a network from attacks
such as IP spoofing, IP source routing,
and DNS spoofing. An attacker who has managed to take over a network
can only force ssh to disconnect. He or she cannot play back the
traffic or hijack the connection when encryption is enabled.
When using ssh's slogin (instead of
rlogin) the entire login session, including transmission of password,
is encrypted; therefore it is almost impossible for an outsider to
collect passwords.
SSH is available for Windows, Unix,
Macintosh, and it also works with
RSA authentication.
SSL
- Short for Secure Sockets Layer,
is a protocol developed by Netscape for transmitting private documents
via the Internet.
SSL uses a cryptographic system
that uses two keys to encrypt data − a public key known to everyone
and a private or secret key known only to the recipient of the
message. Both Netscape Navigator and Internet Explorer
support SSL, and many Web sites use
the protocol to obtain confidential user information, such as credit
card numbers.
TLS
- Short for Transport Layer Security,
a protocol that guarantees privacy and data integrity between
client/server applications communicating over the Internet.
The TLS protocol is made up of two
layers:
-
The TLS Record Protocol --
layered on top of a reliable transport protocol, such as TCP, it
ensures that the connection is private by using symmetric data
encryption and it ensures that the connection is reliable. The TLS
Record Protocol also is used for encapsulation of higher-level
protocols, such as the TLS Handshake Protocol.
-
The TLS Handshake Protocol --
allows authentication between the server and client and the
negotiation of an encryption algorithm and cryptographic keys before
the application protocol transmits or receives any data.
TLS is application
protocol-independent. Higher-level protocols can layer on top of the
TLS protocol transparently.
Based on
Netscape’s SSL 3.0, TLS supercedes and is an extension of
SSL. TLS and SSL are not interoperable. |