asked on

SSL and TLS on internet protocol suite

Hi just needed to be sure that TLS is on transport layer of internet protocol suite as name suggests.

Is SSL on same layer - ive heard its somewhere in between, is that possible.

Also wiki says they are both on the app layer.

Confused - please untangle lol.

SOLUTION

liddler

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

ASKER CERTIFIED SOLUTION

vinsvin

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

Johny_Brav0

ASKER

Thanks for good answers.

Although you answered questions which need to be answered later in research, we still are not getting the original question e.g. limitations being admin overhead helps greatly and so does e-commerce part.

What I need is to draw a diagram that shows an e-commerce transaction using HTTPS over the OSI model and TCP/IP stack, so:
1- Need to know exact layers of each stack/model HTTPS operates on - I ask here as various sources state different answers.
2- hopefully tie in the transaction stages in same diagram i.e. handshake, certs etc - thats up to me to do.

First answer helped a bit, but need both models/stack included.

Will award both points when 1 is more clear.

Cheers folks

liddler

1. HTTPS operates at the application layer, the underlying SSL/TLS protocol operates just below the application layer, but not a low as the transport layer (TCP). SSL/TLS does not quite operate at an exact OSI layer.
2. handshake at TCP layer, cert at application layer

SOLUTION

vinsvin

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer