Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

It may seem crazy to you, but I wasn't able to find any detailed description of these security protocols on the web (except wikipedia).

Can you point me out some documentation of the protocols implementations?

share|improve this question
Is there anything more specific that you want to know about? – Bruno Apr 20 '12 at 11:06
@Bruno i would like to know about the handshake protocol – Matteo Apr 20 '12 at 12:30
There is now a dedicated question on security.SE on that subject, with detailed answers. – Thomas Pornin Dec 4 '12 at 3:22
up vote 4 down vote accepted

To add to Gurzo's list, here are a few other links with diagrams:

For the actual references:

Proper usage of SSL/TLS also depends on other factors. In general, X.509 certificates will also be used and verified using the PKIX specification (not an easy read if you're new to the field). (Other types of certificates/authentication methods can be used in some cases.) You may also want to tie this up with the certificate host name verification: RFC 2818 (section 3.1) (HTTPS) and RFC 6125 (more general). These are not part of SSL/TLS as such, but are part of the overall picture to establish a secure connection.

(If you're also after the difference between SSL, TLS and their usage modes such as STARTTLS, you may also want to have a look at this rather detailed answer on ServerFault I wrote a few weeks ago.)

share|improve this answer
Perhaps you might also be interested in this question: – Bruno Apr 20 '12 at 11:19
Hey thanks a lot, was it me blind, or you who knew were to look? ;D – Matteo Apr 20 '12 at 12:31

A quick Google search returned:

share|improve this answer
Hey thanks a lot, was it me blind, or you who knew were to look? ;D – Matteo Apr 20 '12 at 12:31
TBH, I just googled it and checked for reliable domains ;) – Gurzo Apr 20 '12 at 14:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.