Question

7. What is an eavesdropping attack and what is the difference between TSL and SSL?

Answer 1

Eavesdropping :-

Eavesdropping is the unauthorized real-time interception of a private communication, such as a phone call, instant message, videoconference or fax transmission.

The term eavesdrop derives from the practice of actually standing under the eaves of a house, listening to conversations inside.

Eavesdropping on a conventional telephone line through technical methods is known as wiretapping.

Example :-

Peskyspy was designed to access Skype call audio before it was encrypted, a wiretap trojan.

Difference between TLS and SSL ----->

	TLS	SSL
1	Transport Layer Security	Secure Socket Layers
2	TLS is successor to SSL	SSL is the predecessor to TLS
3	TLS means a by protocol connection where the program will connect insecurely first and use special commands to enable encryption.	SSL means a by port explicit connection to a port that expects to the session to start with security negotiation
4	TLS name was changed to avoid any legal issues with Netscape so that the protocol could be "open and free" (and published as a RFC)	SSL was coined by the inventors of the first versions of the protocol, Netscape (the company was later bought by AOL).