What is SSL and why is it not enough when it comes to encryption?



What is SSL and why is it not enough when it comes to encryption?..

Answer / chaitanya

SSL is identity verification, not hard data encryption. It is designed to be able to prove that the person you are talking to on the other end is who they say they are. SSL and its big brother TLS are both used almost everyone online, but the problem is because of this it is a huge target and is mainly attacked via its implementation (The Heartbleed bug for example) and its known methodology. As a result, SSL can be stripped in certain circumstances, so additional protections for data-in-transit and data-at-rest are very good ideas.

Is This Answer Correct ?    0 Yes 1 No

Post New Answer

More Computer Security Interview Questions

What is meant by computer application?

0 Answers  


What is dora process in DHCP and how it works?

0 Answers  


What’s better, a red team or a blue team?

1 Answers  


What is the CIA triangle?

1 Answers  


What is an easy way to configure a network to allow only a single computer to login on a particular jack?

1 Answers  






 What is Exfiltration?

0 Answers  


 What is the difference between a Black Hat and a White Hat?

1 Answers  


 What is the difference between Information Protection and Information Assurance?

1 Answers  


 What is the difference between an HIDS and a NIDS?

1 Answers  


What is worse in Firewall Detection, a false negative or a false positive? And why?

1 Answers  


What is XSS?

1 Answers  


 Why is deleted data not truly gone when you delete it?

1 Answers  


Categories
  • Computer Security Interview Questions Computer Security (58)
  • Mobile Security Interview Questions Mobile Security (9)
  • Hacking Interview Questions Hacking (33)
  • Security AllOther Interview Questions Security AllOther (4)