Tls 1.0: IETF standardized SSL, namely RFC2246, and called it TLS(TransportLayerSecurity). Technically, there is little difference between TLS 1.0 and SSL3.0.
The difference between this protocol and SSL 3.0 is not big enough to hinder the interoperability between TLS 1.0 and SSL 3.0. TLS 1.0 contains implementations that can be downgraded to SSL3.0, which weakens the security of the connection.
SSL(SecureSocketsLayer) is a secure transport protocol designed by Netscape for the Web, which is widely used on the Web.
SSL2.0 was released in February 1995, but it was replaced by version 3.0 due to several serious security vulnerabilities.
SSL3.0 was released in 1996 and completely redesigned by Netscape engineers PaulKocher, PhilKarlton and AlanFreier. The newer version of SSL/TLS is based on SSL3.0, which was published by IETF as a historical document through RFC6 10 1.
Extended data:
TLS is a new protocol developed by IETF (Internet Engineering Task Force), which is based on SSL 3.0 protocol specification and is the subsequent version of SSL 3.0. However, there are obvious differences between TLS and SSL 3.0, mainly because they support different encryption algorithms, so TLS and SSL 3.0 cannot interoperate.
The main goal of TLS is to make SSL more secure and the specification of the protocol more accurate and detailed. Based on SSLv3.0, TLS mainly has the following enhancements:
1)TLS uses a more secure MAC algorithm called Message Authentication Code Key Hash (HMAC).
2) When sending some alarms, TLS will provide more specific and more alarms and records.
3) The pseudo-random function is enhanced, and TLS improves the security.