What is SSL and why is it not enough when it comes to encryption?



What is SSL and why is it not enough when it comes to encryption?..

Answer / chaitanya

SSL is identity verification, not hard data encryption. It is designed to be able to prove that the person you are talking to on the other end is who they say they are. SSL and its big brother TLS are both used almost everyone online, but the problem is because of this it is a huge target and is mainly attacked via its implementation (The Heartbleed bug for example) and its known methodology. As a result, SSL can be stripped in certain circumstances, so additional protections for data-in-transit and data-at-rest are very good ideas.

Is This Answer Correct ?    0 Yes 1 No

Post New Answer

More Computer Security Interview Questions

What is meant by computer application?

0 Answers  


You find out that there is an active problem on your network. You can fix it, but it is out of your jurisdiction. What do you do?

1 Answers  


What’s the difference between Symmetric and Asymmetric encryption?

1 Answers  


On a Windows network, why is it easier to break into a local account than an AD account?

1 Answers  


What is data protection in transit vs data protection at rest?

1 Answers  


 What is the difference between an HIDS and a NIDS?

1 Answers  


Does indexing slow down computer?

0 Answers  


You need to reset a password-protected BIOS configuration. What do you do?

1 Answers  


I run an SMB. I have 4 people in my entire company and a web-based store. I don’t have the time, patience or manpower to have a computer guy. Why should I care about exploits and computer jibberish?

0 Answers  


How would you login to Active Directory from a Linux or Mac box?

0 Answers  


Is a console a computer?

0 Answers  


 You see a user logging in as root to perform basic functions. Is this a problem?

1 Answers  


Categories
  • Computer Security Interview Questions Computer Security (58)
  • Mobile Security Interview Questions Mobile Security (9)
  • Hacking Interview Questions Hacking (33)
  • Security AllOther Interview Questions Security AllOther (4)