Sunday, June 16, 2024

TLS 1.3 Released – Most Important Security Protocol on the Internet with Extreme Privacy, Security, and Performance

An Internet’s most Important security protocol TLS 1.3 released with various improvement to perform a secure communication for online commerce, medicine, and other sensitive transactions

TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery.

TLS 1.3 is extremely secured when compared to TLS 1.2 and it provides more security and efficiently access the Internet over the next 20 years and beyond.

IETF(Internet Engineering Task Force) started working hard to upgrade the TLS 1.3 protocol since various high profile vulnerability has been exploited in TLS 1.2.

It considers as a modern internet protocol that released with major improvements in the areas of security, performance, and privacy.

TLS 1.3 eliminates many existing flaws and only includes support for algorithms with no known vulnerabilities.

TLS 1.3 Development Operation

The development process has been engaged with the various cryptographic research community to analyze, improve, and validate the security of TLS 1.3.

This new implementation of TLS 1.3 building and testing implementations by many companies and organizations that provide products such as web browsers, content distribution networks, and services widely used on the Internet.

Apart from this IETF Conducting various workshops where researchers could present their findings and use it to fix and improve the security in the TLS version 1.3.

According to IETF,  This enhancement helps protect the identities of the participants and impede traffic analysis. TLS 1.3 also enables forward secrecy by default which means that the compromise of long-term secrets used in the protocol does not allow the decryption of data communicated while those long-term secrets were in use.

This new enhancement makes hands faster than ever that helps to establish the very fast communication compare the previous version.

IETF Collaborated with various people who work on web browsers, websites, and the Internet of Things and demonstrate interoperability, catch documentation and implementation bugs in IETF 98 Hackathon project.

Now many of the applications and modern browsers already started using new TLS version and the future updates will bring the support for those not currently supporting the protocol.

if you manage a website or other online service, the servers and infrastructure you use are likely to start using TLS 1.3 though it is worth double checking with your providers.IEFT Said.

Also Read

Let’s Encrypt Root Certificate Now Directly Trusted by Microsoft and all Major Root Programs

Facebook Launches Open Source Library Fizz To Enhance TLS 1.3 Protocol

Transport Layer Security (TLS) 1.3 approved by IETF With the 28th Draft

Website

Latest articles

Sleepy Pickle Exploit Let Attackers Exploit ML Models And Attack End-Users

Hackers are targeting, attacking, and exploiting ML models. They want to hack into these...

SolarWinds Serv-U Vulnerability Let Attackers Access sensitive files

SolarWinds released a security advisory for addressing a Directory Traversal vulnerability which allows a...

Smishing Triad Hackers Attacking Online Banking, E-Commerce AND Payment Systems Customers

Hackers often attack online banking platforms, e-commerce portals, and payment systems for illicit purposes.Resecurity...

Threat Actor Claiming Leak Of 5 Million Ecuador’s Citizen Database

A threat actor has claimed responsibility for leaking the personal data of 5 million...

Ascension Hack Caused By an Employee Who Downloaded a Malicious File

Ascension, a leading healthcare provider, has made significant strides in its investigation and recovery...

AWS Announced Malware Detection Tool For S3 Buckets

Amazon Web Services (AWS) has announced the general availability of Amazon GuardDuty Malware Protection...

Hackers Exploiting MS Office Editor Vulnerability to Deploy Keylogger

Researchers have identified a sophisticated cyberattack orchestrated by the notorious Kimsuky threat group.The...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Free Webinar

API Vulnerability Scanning

71% of the internet traffic comes from APIs so APIs have become soft targets for hackers.Securing APIs is a simple workflow provided you find API specific vulnerabilities and protect them.In the upcoming webinar, join Vivek Gopalan, VP of Products at Indusface as he takes you through the fundamentals of API vulnerability scanning..
Key takeaways include:

  • Scan API endpoints for OWASP API Top 10 vulnerabilities
  • Perform API penetration testing for business logic vulnerabilities
  • Prioritize the most critical vulnerabilities with AcuRisQ
  • Workflow automation for this entire process

Related Articles