TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Why TLS is called "TLS", not "SSL 3.1"

229 点作者 timdierks将近 11 年前

7 条评论

tptacek将近 11 年前
Schneier was definitely famous in the late &#x27;90s, when this decision was made; he was famous almost immediately after the publication of Applied Cryptography, which came out when I was in high school.<p>SSL 2.0 is a disaster. The handshake isn&#x27;t protected. Records (the data unit of SSL&#x2F;TLS) do have MACs, but the MAC is secret-prefix MD5, with a key shared by encryption. Record MACs are also inconsistently applied. All of these problems are probably worse than any of the major TLS bugs --- renegotiation, BEAST, CRIME, RC4, Lucky13 --- that followed SSL 2.0.<p>Paul Kocher is the author of SSL 3.0, but also famous as one of the first (possibly the first) researcher to publish on side channel attacks --- he released a technical paper on square-and-multiply timing against RSA in the &#x27;90s. He founded Cryptography Research, which later built the as-yet-unbroken pay TV card system and the Blu-ray BD+ DRM system, along with publishing a crapload of crypto research.
评论 #7789628 未加载
评论 #7790106 未加载
chewxy将近 11 年前
The more I read into specifications and standardization stuff, the more amazed I am at how political we geeks can get.
评论 #7789543 未加载
评论 #7789581 未加载
评论 #7789999 未加载
pacaro将近 11 年前
When I worked in Windows Security (BitLocker FWIW), Barb Fox&#x27;s office was a windowless closet with an antique computer and a bunch of boxes in it that hadn&#x27;t been touched in years. I&#x27;ve no idea what she was doing at that time, but nobody ever saw her and her stuff was religiously moved to a new closet every time we moved buildings...
评论 #7790109 未加载
matthiasb将近 11 年前
There is an interesting comment below the article: &quot;Yuhong BaoMay 23, 2014 at 10:14 AM<p>On this matter, anyone remember the Netscape random number generator bug: <a href="http://www.cs.berkeley.edu/~daw/papers/ddj-netscape.html" rel="nofollow">http:&#x2F;&#x2F;www.cs.berkeley.edu&#x2F;~daw&#x2F;papers&#x2F;ddj-netscape.html</a> Notice the paragraph at the end about RSA Data Security!&quot;
omh将近 11 年前
So they couldn&#x27;t call it &quot;SSL 3&quot; because it couldn&#x27;t be seen to be the Netscape proposal - fair enough. But it&#x27;s a shame they didn&#x27;t take the simpler route and just call it &quot;SSL 4&quot;.
评论 #7789619 未加载
评论 #7789635 未加载
lectrick将近 11 年前
&gt; As a part of the cutthroat competition, Microsoft decided to revise the SSL 2 protocol with some additions of their own, and specified a protocol called &quot;PCT&quot; that was derived from SSL 2. It was only supported in IE and IIS.<p>These motherfuckers...<p><a href="https://en.wikipedia.org/wiki/Embrace,_extend_and_extinguish" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Embrace,_extend_and_extinguish</a>
x86dev将近 11 年前
And if you look at a TLS 1.0 handshake message you&#x27;ll see 15 03 01