---
title: "Short note: SSL"
subject: "Computer Networks and Security"
chapter: 8
key: "semester_7/computer_networks_and_security:ssl-note"
source: https://www.bctengineer.com/q/semester_7/computer_networks_and_security/ssl-note
site: BCT Engineering
---

# Short note: SSL

Computer Networks and Security · Chapter 8: Network Security

- Asked in: 2071 Shrawan, 4 marks; 2071 Chaitra, 4 marks (asked 2 times)
- Video: [SSL/TLS Explained in 7 Minutes](https://www.youtube.com/watch?v=67Kfsmy_frM) — Sematext
- Answer checked by Claude Opus 5.5 (high effort) on 2026-10-14
- Page: https://www.bctengineer.com/q/semester_7/computer_networks_and_security/ssl-note
- Whole chapter: https://www.bctengineer.com/md/semester_7/computer_networks_and_security/chapter-8

## Question

Write a short note on SSL.

## Short answer

SSL/TLS provides security above TCP, offering encryption, integrity, and server authentication via X.509 certificates. The handshake negotiates a cipher suite and establishes shared session keys for subsequent symmetric encryption of data, widely used in HTTPS.

## Answer

**SSL (Secure Sockets Layer)**, developed by Netscape, provides security between the application layer and TCP (transport layer). Its successor is **TLS (Transport Layer Security)**; SSL 3.0 is now obsolete, but the name SSL is still used. HTTPS = HTTP over SSL/TLS (port 443).

#### Services
Confidentiality (encryption), message integrity (MAC), and server (and optionally client) authentication using X.509 certificates.

#### Protocol structure
```text
+-----------+--------+-----------+-----------+
| Handshake | Change | Alert     | HTTP etc. |
|           | Cipher |           |           |
+-----------+--------+-----------+-----------+
|           SSL Record Protocol              |
+--------------------------------------------+
|                    TCP                     |
```
- **Handshake protocol:** negotiates version and cipher suite, authenticates the server by certificate, and establishes the shared secret (pre-master secret encrypted with RSA or by Diffie-Hellman).
- **Record protocol:** fragments the data, compresses, adds a MAC, encrypts with the session key and sends.
- **Alert protocol:** reports errors or closure.

#### Handshake in short
1. Client Hello (versions, cipher suites, random).
2. Server Hello + Certificate.
3. Client verifies the certificate, sends the encrypted pre-master secret.
4. Both derive session keys; Finished messages are exchanged.
5. Data is sent encrypted with symmetric keys.

## Check yourself

The answer's key points as multiple-choice questions, with the correct option and why.

1. Where does SSL sit in the stack?
   A. Above HTTP only
   B. Between application and TCP
   C. In the data link layer
   D. Below IP
   Answer: B. SSL provides security between the application layer and TCP. (Key point: Position)

2. What does the handshake protocol do?
   A. Fragments and compresses data
   B. Negotiates cipher suite, authenticates server by certificate and establishes shared secret
   C. Reports errors
   D. Encrypts the MAC
   Answer: B. Handshake negotiates and authenticates; record protocol handles data. (Key point: Handshake purpose)

3. How is the pre-master secret sent in the handshake?
   A. Hashed
   B. Through the alert protocol
   C. Encrypted (e.g. with the server's RSA public key) or via Diffie-Hellman
   D. In plain text
   Answer: C. The client sends it encrypted with RSA or the secret is made by Diffie-Hellman. (Key point: Pre-master secret)

4. What does the record protocol do?
   A. Verifies certificates
   B. Negotiates versions
   C. Fragments, compresses, adds MAC, encrypts and sends
   D. Closes the session
   Answer: C. The record protocol protects the application data. (Key point: Record protocol)