Question

We know that TCP does not provide security services, but it can be enhanced with TLS to do that. Answer the following: [ / 4] a) Does TLS operate at the transport layer or the application layer? b) Where does an application developer should write the TLS code? c) What security services TLS can provide? d) To what layer of the OSI protocol stack TLS belongs?

Answer 1

a) TLS operates at the transport layer. In real life situations, it is mostly session layer operation because of its point-to-point security for sessions in transport.

b) TLS coding is server side coding. TLS protects the transfer of data from server to another server or client.

c) TLS provides many services. It is used to offer secure communication for emails, data transfers, internet faxing, etc.

d) It belongs to the Transport layer of OSI. It does help in the implementation of session start up, integrity, identity, and management.