Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

There are altogether 5 protocols available for SSL and TLS combined.

ProtocolStatus
TLS v1.2Recommended. They support the latest cryptographic algorithms
TLS v1.1Ok to use as long as the backward compatibility has been turned off.
TLS v1.0Insecure do not use
SSL v2Insecure do not use
SSL v1Insecure do not use

Cipher Suites

For the encryption and decryption to happen in a secure way we have to define what cipher suite we want to cover. The strength of the TLS is directly dependent on the cipher suite that we decide to use. The servers should be configured to disable all week ciphers. The cheat sheet for ciphers can be found in https://www.owasp.org/index.php/TLS_Cipher_String_Cheat_Sheet

...