News for hackers. Stuff that matters.

A comment on Why SSL was renamed to TLS in late 90s (2014). Parent comment

Re:Why SSL was renamed to TLS in late 90s (2014) by mcpherrinm on Sunday June 15, 2025 @10:58PM (#44286312)
The main difference is in the padding. When the POODLE attack was pre-announced as only affecting SSL3 and not TLS1.0, that was enough to predict it was going to be a padding oracle.

I think it’s fair to say they’re very similar, with a few “bug fixes”. It’s been a while since I’ve thought about either though, and might be forgetting a few things. I’ve only ever implemented SSL3 and TLS1.0 together, so there may be some details I’m forgetting.

[ Parent | on HN ]
Re:Why SSL was renamed to TLS in late 90s (2014) by nextgens on Monday June 16, 2025 @03:26AM (#44287343)
TLS1.0 introduced modularity via the concept of "extensions". It's everything but a minor evolution of the protocol.
[ Parent | on HN ]