The Secure Sockets Layer (SSL) Protocol Version 3.0

Abstract

of the SSL 3.0 protocol.The original Abstract follows.This document specifies version 3.0 of the Secure Sockets Layer (SSL 3.0) protocol, a security protocol that provides communications privacy over the Internet.The protocol allows client/server applications to communicate in a way that is designed to prevent eavesdropping, tampering, or message forgery. ForewordAlthough the SSL 3.0 protocol is a widely implemented protocol, a pioneer in secure communications protocols, and the basis for Transport Layer Security (TLS), it was never formally published by the IETF, except in several expired Internet-Drafts.This allowed no easy referencing to the protocol.We believe a stable reference to the original document should exist and for that reason, this document describes what is known as the last published version of the SSL 3.0 protocol, that is, the November 18, 1996, version of the protocol.There were no changes to the original document other than trivial editorial changes and the addition of a "Security Considerations" section.However, portions of the original document that no longer apply were not included.Such as the "Patent Statement" section, the "Reserved Ports Assignment" section, and the cipher-suite registrator note in the "The CipherSuite" section.The "US export rules" discussed in the document do not apply today but are kept intact to provide context for decisions taken in protocol design.The "Goals of This Document" section indicates the goals for adopters of SSL 3.0, not goals of the IETF.