Re: Securing Z39.50 & SSL

SSLeay/OpenSSL support TLS in addition to SSL2 and SSL3.  TLS is for all
intents and purposes SSL3, Netscape's "standard" standardized by IETF.


----- Original Message -----

> A quick look over the RFC's reveals that TLS is very close to SSL but not
> interoperable (I think the main difference is that TLS supports more
> encryption algorithms than SSL etc., but most of the protocol is almost
> identical) - see RFC 2246 and compare with
> http://home.netscape.com/eng/ssl3/3-SPEC.HTM. A concern here is to adopt
> something that can be implemented today, as opposed to something coming in
> the future (e.g. we can't wait for the inbuilt mechanisms planned for
> Internet2) as some of us have a need to implement this sort of security
now.
> There are already some proven SSL toolkits (SSLeay, OpenSSL, STunnel)
> available (both commercial and GNU source code license ones, on both
> Unix/Linux and Windoze platforms). Does anyone know of similar for TLS
> (that's a genuine question, not a rhetorical one)?

Received on Monday, 14 August 2000 19:02:05 UTC