Q1) Explain the difference between SSL connection and session.Q2) .pdf
- 1. Q1) Explain the difference between SSL connection and session. Q2) What is the advantage of not including the MAC in the scope of packet encryption in SSH Transport Protocol? Q3) Show what part of SSL that protects against the following attacks :- a. Replay Attack: Earlier SSL handshake messages are replayed. b. Man-in-the-Middle Attack: An attacker interposes during key exchange, acting as the client to the server and as the server to the client. c. IP Spoofing: Uses forged IP addresses to fool a host into accepting bogus data. Solution Answer : Q1) Explain the difference between SSL connection and session. Answer : Explanation : These are the main the difference between SSL connection and session.. .................................... Q2) What is the advantage of not including the MAC in the scope of packet encryption in SSH Transport Protocol? Answer : This allows for the message to be authenticated before attempting decryption,which may be more efficient. Explanation : This allows for the message to be authenticated before attempting decryption,which may be more efficient is the advantage of not including the MAC in the scope of packet encryption in SSH Transport Protocol .................S.noConnection Session1.Connection is a live communication channel.Session is a set of negotiated cryptography parameters.2.A transient peer -to - peer communications link.Session is an association between client and server.3.Each connection associated with 1 SSL Session.Session is created by Handshake protocol.4.SSL Connection is a transport that provides a suitable type of service.Shared by multiple SSL Connections.