转载 网站如何开启 TLS

TLS是什么？

RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3

TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery.

Major Differences from TLS 1.2

Wireshark 抓包分析

TCP 三次握手

  • SYN SYN
  • SYN ACK SYN ACK
  • ACK ACK

TLS 协商

以 TLS 1.3 为例

  • Client Hello Client Hello
  • Server Hello, Change Cipher Spec, Encrypted Extensions Server Hello, Change Cipher Spec, Encrypted Extensions
  • Certificate, Certificate Verify, Finished Certificate, Certificate Verify, Finished
  • Change Cipher Spec, Finished Change Cipher Spec, Finished