1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

ssl and tls

Discussion in 'General Security' started by GrannyGizz, Jul 2, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. GrannyGizz

    GrannyGizz Thread Starter

    Joined:
    Apr 20, 2009
    Messages:
    46
    Do I need ssl 2.0, ssl 3.0 and tls 1.0 all enabled in my Internet Options--Advanced folder? I know they are concerned with security but after googling them, I wondered. Did tls replace ssl?
     
  2. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,629
    You didn't mention which version of Internet Explorer you're using.

    I have IE8 in my Windows XP computer and IE9 in my Windows 7 computers.

    By default, "Use SSL 3.0" and "Use TLS 1.0" are selected.

    "Use SSL 2.0" and "Use TLS 1.1" and "Use TLS 1.2" are unchecked.

    -----------------------------------------------------------
     
  3. karstudios

    karstudios

    Joined:
    Jun 24, 2011
    Messages:
    75
    TLS did not replace SSL. However, you can view SSL 3.0 as the ground building for TLS 1.0. TLS was never truly designed to replace SSL, it was more of a Windows Server 2003 thing. This is funny as some people refer to TSL as SSL 3.1.

    They are both strong encryption protocols and I would have to type a long explanation to truly explain the difference (If you want more info Try Google-> TLS vs SSL). Just know what when turning on SSL and TLS you are ensuring that you browser configurations are compatible with the server you are connecting to.

    In the future you can except TLS to take over, that just my opinion.
     
  4. GrannyGizz

    GrannyGizz Thread Starter

    Joined:
    Apr 20, 2009
    Messages:
    46
    I have 5 different choices....SSL 2.0 (checked), SSL 3.0 (checked), TLS 1.0 (unchecked), TLS 1.1 (unchecked), and TLS 1.2 (unchecked)
    Can I uncheck SSL 2.0 and check TLS 1.2?
    Mary
     
  5. karstudios

    karstudios

    Joined:
    Jun 24, 2011
    Messages:
    75
    I would leave them all checked, you will not hurt your system, this will help ensure that your browser is compatible with a secure system that may possibly be using a older version. You choice. However, if you do run into issues because they are not checked, then I will go back check them, and restart your browser then try again.
     
  6. TOGG

    TOGG

    Joined:
    Apr 2, 2002
    Messages:
    5,700
    If the Wikipedia article on this subject can be relied on, SSL 2.0 is so out of date it shouldn't even be available as an option; http://en.wikipedia.org/wiki/Transport_Layer_Security. Quote from Wikipedia;

    "SSL 2.0 is disabled by default in Internet Explorer 7, Mozilla Firefox 2, Mozilla Firefox 3, Mozilla Firefox 4 Opera and Safari. After it sends a TLS ClientHello, if Mozilla Firefox finds that the server is unable to complete the handshake, it will attempt to fall back to using SSL 3.0 with an SSL 3.0 ClientHello in SSL 2.0 format to maximize the likelihood of successfully handshaking with older servers. Support for SSL 2.0 (and weak 40-bit and 56-bit ciphers) has been removed completely from Opera as of version 9.5." [Obviously, the browser version numbers mentioned are now out of date]

    In my Opera browser (11.5), SSL 3 and TLS 1 are checked by default while TLS 1.1 and 1.2 are available but unchecked. In Firefox (5) there are only SSL 3 and TLS 1 available and both are checked by default.
     
  7. karstudios

    karstudios

    Joined:
    Jun 24, 2011
    Messages:
    75
    The reason why I said you should have SSL 2.0 active, is because some Military and other government websites require SSL 2.0. (the reason, I am not sure) If you have no reason for that, then you can follow what TOGG said.
     
  8. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,629
    I guess that explains why SSL 3.0 and TLS 1.0 are the only 2 checked by default in IE8 and IE9 in my Windows XP and Windows 7 computers.

    You never stop learning something new about these machines.

    ------------------------------------------------------------------
     
  9. GrannyGizz

    GrannyGizz Thread Starter

    Joined:
    Apr 20, 2009
    Messages:
    46
    Thanks for the great explanations. I was afraid that I should have or have not something checked or not checked (if you get what I mean). I'll leave things the way they were.
    You guys are great. I try not to do anything of any importance without checking with someone and "You da man"
    Mary
     
  10. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1005326