Skip to content

SSL and TLS

Secure Sockets Layer (SSL) and its successor, Transport Layer Security (TLS), are cryptographic protocols designed to provide communications security over a computer network. While commonly referred to as "SSL" (a legacy term), modern secure connections use the TLS protocol to authenticate the server and encrypt the data channel.

Impact

TLS is the foundation of trust on the internet (HTTPS). It ensures confidentiality (encryption), integrity (tamper-proofing), and authenticity (identity verification). Weak configurations (using old protocols like SSLv3 or TLS 1.0) expose systems to man-in-the-middle attacks.

Weinto take

SSL is dead; long live TLS. We enforce strict TLS 1.2+ (preferring 1.3) everywhere. We do not support legacy clients that require insecure cipher suites. Encryption is mandatory not just at the perimeter, but in transit between internal services (Zero Trust).