TLS-over-TCP
E544007
TLS-over-TCP is a secure communication method that encrypts data using the Transport Layer Security (TLS) protocol on top of the reliable Transmission Control Protocol (TCP).
Statements (62)
| Predicate | Object |
|---|---|
| instanceOf |
network security protocol stack arrangement
ⓘ
secure transport mechanism ⓘ |
| alternativeTo | DTLS-over-UDP NERFINISHED ⓘ |
| canBeConfiguredWith | mutual TLS authentication ⓘ |
| canUseAuthenticationMethod | X.509 certificates NERFINISHED ⓘ |
| canUseCipherSuite |
AES-GCM
ⓘ
ChaCha20-Poly1305 ⓘ |
| canUseKeyExchange |
DHE
ⓘ
ECDHE ⓘ |
| dataUnit | TLS records carried inside TCP segments ⓘ |
| deprecatedVersion |
TLS 1.0
ⓘ
TLS 1.1 ⓘ |
| IETFRFC |
RFC 2246 (TLS 1.0)
NERFINISHED
ⓘ
RFC 4346 (TLS 1.1) ⓘ RFC 5246 (TLS 1.2) NERFINISHED ⓘ RFC 793 (TCP) NERFINISHED ⓘ RFC 8446 (TLS 1.3) ⓘ RFC 9293 (TCP specification update) ⓘ |
| layeringModel | TLS on top of TCP ⓘ |
| OSIlayering |
TCP at OSI layer 4
ⓘ
TLS at OSI layer 4.5 ⓘ |
| providesProperty |
authentication
ⓘ
confidentiality ⓘ endpoint identity verification ⓘ integrity ⓘ replay protection ⓘ |
| reliesOnProperty |
congestion control of TCP
ⓘ
flow control of TCP ⓘ ordered delivery of TCP ⓘ reliable byte-stream of TCP ⓘ |
| requires | public key infrastructure for certificate validation ⓘ |
| requiresComponent |
TLS handshake
ⓘ
TLS record layer ⓘ |
| securityGoal | protect application data in transit over IP networks ⓘ |
| securityLayer | TLS NERFINISHED ⓘ |
| supportsFeature |
ALPN (Application-Layer Protocol Negotiation)
NERFINISHED
ⓘ
SNI (Server Name Indication) NERFINISHED ⓘ forward secrecy (with appropriate key exchange) ⓘ session resumption ⓘ |
| supportsVersion |
TLS 1.0
ⓘ
TLS 1.1 NERFINISHED ⓘ TLS 1.2 ⓘ TLS 1.3 ⓘ |
| threatMitigated |
data tampering on the wire
ⓘ
eavesdropping ⓘ man-in-the-middle attacks (with proper validation) ⓘ |
| transportLayer | TCP NERFINISHED ⓘ |
| typicalPortUsage |
TCP port 443 for HTTPS
ⓘ
TCP port 465 for SMTPS ⓘ TCP port 993 for IMAPS ⓘ TCP port 995 for POP3S ⓘ |
| typicalUsageContext |
VPN tunneling (e.g., OpenVPN over TCP)
ⓘ
email transport security ⓘ web browsing security ⓘ |
| usedByProtocol |
FTPS (explicit mode)
NERFINISHED
ⓘ
HTTPS ⓘ IMAPS ⓘ LDAP over TLS (LDAPS) ⓘ POP3S ⓘ SMTPS ⓘ |
| usesProtocol |
Transmission Control Protocol
NERFINISHED
ⓘ
Transport Layer Security NERFINISHED ⓘ |
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.