Get the latest tech news

Why SSL was renamed to TLS in late 90s (2014)


The Netscape/Microsoft browser wars in the mid-90's were really vicious and competitive. They really had it out for each other. Netscape had...

SSL 2 had some flaws, both cryptographic and practical; not dramatic enough to make replacing it a crisis, but it clearly needed some work from early on. Various people in the industry & community didn't want a fork, so we (Consensus Development, where I worked with Christopher Allen at the time, and where I had written the SSL 3.0 reference implementation under contract to Netscape) hosted a meeting between representatives from Netscape and Microsoft; I forget everyone who was there, but I recall that Bruce Schneier was there (before he was famous), and probably Paul Kocher, who had designed the SSL 3 protocol; Barbara Fox represented Microsoft. And we negotiated a deal where Microsoft and Netscape would both support the IETF taking over the protocol and standardizing it in an open process, which led to me editing the RFC.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of TLS

TLS

Photo of SSL

SSL

Photo of late 90s

late 90s

Related news:

News photo

SSL/TLS certificate lifespans reduced to 47 days by 2029

News photo

AWS rolls out ML-KEM to secure TLS from quantum threats

News photo

Setting up a trusted, self-signed SSL/TLS certificate authority in Linux