It may seem crazy to you, but I wasn't able to find any detailed description of these security protocols on the web (except wikipedia).

Can you point me out some documentation of the protocols implementations?

  • 1
    Is there anything more specific that you want to know about?
    – Bruno
    Apr 20, 2012 at 11:06
  • @Bruno i would like to know about the handshake protocol
    – Matteo
    Apr 20, 2012 at 12:30
  • 1
    There is now a dedicated question on security.SE on that subject, with detailed answers. Dec 4, 2012 at 3:22

2 Answers 2


To add to Gurzo's list, here are a few other links with diagrams:

For the actual references:

Proper usage of SSL/TLS also depends on other factors. In general, X.509 certificates will also be used and verified using the PKIX specification (not an easy read if you're new to the field). (Other types of certificates/authentication methods can be used in some cases.) You may also want to tie this up with the certificate host name verification: RFC 2818 (section 3.1) (HTTPS) and RFC 6125 (more general). These are not part of SSL/TLS as such, but are part of the overall picture to establish a secure connection.

(If you're also after the difference between SSL, TLS and their usage modes such as STARTTLS, you may also want to have a look at this rather detailed answer on ServerFault I wrote a few weeks ago.)


A quick Google search returned:

  • Hey thanks a lot, was it me blind, or you who knew were to look? ;D
    – Matteo
    Apr 20, 2012 at 12:31
  • TBH, I just googled it and checked for reliable domains ;)
    – Gurzo
    Apr 20, 2012 at 14:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .