What is SSL and why is it not enough when it comes to encryption?



What is SSL and why is it not enough when it comes to encryption?..

Answer / chaitanya

SSL is identity verification, not hard data encryption. It is designed to be able to prove that the person you are talking to on the other end is who they say they are. SSL and its big brother TLS are both used almost everyone online, but the problem is because of this it is a huge target and is mainly attacked via its implementation (The Heartbleed bug for example) and its known methodology. As a result, SSL can be stripped in certain circumstances, so additional protections for data-in-transit and data-at-rest are very good ideas.

Is This Answer Correct ?    0 Yes 1 No

Post New Answer

More Computer Security Interview Questions

1. Assume that passwords are selected from four-character combination of 26 alphabetic characters. Assume that an adversary is able to attempt passwords at a rate of one per second. a. Assuming no feedback to the adversary until each attempt has been completed, what is the expected time to recover the correct password? b. Assuming feedback to the adversary flagging an error as each incorrect character is entered, what is the expected time to discover the correct password?

0 Answers  


 What is the difference between an HIDS and a NIDS?

1 Answers  


A phonetic password generator picks two segments randomly for each six-letter password. The form of each segment is CVC (consonant, vowel, consonant), where V= < a, e, i, o, u > and C = (V.) ̅ What is the total password population? What is the probability of an adversary guessing a password correctly?

0 Answers  


How do you protect your home Wireless Access Point?

1 Answers  


What’s the difference between Symmetric and Asymmetric encryption?

1 Answers  






On a Windows network, why is it easier to break into a local account than an AD account?

1 Answers  


Does indexing slow down computer?

0 Answers  


 What is your opinion on hacktivist groups such as Anonymous?

1 Answers  


 What are salted hashes?

1 Answers  


You are remoted in to a headless system in a remote area. You have no physical access to the hardware and you need to perform an OS installation. What do you do?

1 Answers  


What is data source in computer?

0 Answers  


 How would you find out what a POST code means?

1 Answers  


Categories
  • Computer Security Interview Questions Computer Security (58)
  • Mobile Security Interview Questions Mobile Security (9)
  • Hacking Interview Questions Hacking (33)
  • Security AllOther Interview Questions Security AllOther (4)