What is SSL and why is it not enough when it comes to encryption?



What is SSL and why is it not enough when it comes to encryption?..

Answer / chaitanya

SSL is identity verification, not hard data encryption. It is designed to be able to prove that the person you are talking to on the other end is who they say they are. SSL and its big brother TLS are both used almost everyone online, but the problem is because of this it is a huge target and is mainly attacked via its implementation (The Heartbleed bug for example) and its known methodology. As a result, SSL can be stripped in certain circumstances, so additional protections for data-in-transit and data-at-rest are very good ideas.

Is This Answer Correct ?    0 Yes 1 No

Post New Answer

More Computer Security Interview Questions

How would you login to Active Directory from a Linux or Mac box?

0 Answers  


 Why would you want to use SSH from a Windows pc?

1 Answers  


If you were going to break into a database-based website, how would you do it?

1 Answers  


How do you protect your home Wireless Access Point?

1 Answers  


A phonetic password generator picks two segments randomly for each six-letter password. The form of each segment is CVC (consonant, vowel, consonant), where V= < a, e, i, o, u > and C = (V.) ̅ What is the total password population? What is the probability of an adversary guessing a password correctly?

0 Answers  






What is XSS?

1 Answers  


Is a console a computer?

0 Answers  


What is the difference between a virus and a trojan?

0 Answers   Tavant Technologies, Zensar,


How many security protocols available?

1 Answers  


What is the Three-way handshake? How can it be used to create a DOS attack?

1 Answers  


 What is Exfiltration?

0 Answers  


 You see a user logging in as root to perform basic functions. Is this a problem?

1 Answers  


Categories
  • Computer Security Interview Questions Computer Security (58)
  • Mobile Security Interview Questions Mobile Security (9)
  • Hacking Interview Questions Hacking (33)
  • Security AllOther Interview Questions Security AllOther (4)