{"id":1003,"date":"2018-04-27T12:06:37","date_gmt":"2018-04-27T12:06:37","guid":{"rendered":"https:\/\/www.sslrenewals.com\/blog\/?p=1003"},"modified":"2021-11-25T08:33:55","modified_gmt":"2021-11-25T08:33:55","slug":"tls-1-3-heres-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/sslrenewals.com\/blog\/tls-1-3-heres-what-you-need-to-know","title":{"rendered":"TLS 1.3: Here\u2019s What You Need to Know"},"content":{"rendered":"

Let\u2019s have a look at TLS 1.3 and the advancements it brings<\/h2>\n

Hooray! TLS 1.3, the highly anticipated Internet Security Protocol has finally been passed by the Internet Engineering Task Force. The work that was started in 2014 with the first draft of TLS 1.3 has finally come to fruition, and draft 28 of TLS 1.3 has been passed by IETF.<\/p>\n

This approval makes TLS 1.3 the latest and the most secure version of the SSL\/TLS protocol<\/a> family. TLS 1.3 is being hailed by almost all security experts as it’s the most advanced TLS protocol to date. It brings some substantial improvements as far as performance and security are concerned.<\/p>\n

\"TLS<\/p>\n

Let\u2019s have a look at the improvements featuring in TLS 1.3.<\/p>\n

Better Latency<\/h3>\n

For a long time, the only *stupid* argument that’s been made against SSL\/TLS is the time taken to establish a connection between client and server. Now, with TLS 1.3, this thoughtless argument will cease to exist. That\u2019s because of the introduction of 0-RTT (zero round trip) and 1-RTT TLS handshakes.<\/p>\n

You might be aware of the fact that before establishing a secure connection, a handshake takes place. This handshake is called the TLS handshake. This is the part that takes some time as it incorporates back-and-forth communication between client and server. TLS 1.2 and its preceding versions facilitate connections with 2-RTT TLS handshakes. That means that it takes two round trips between the server and client to complete the SSL\/TLS handshake.<\/p>\n

This is going to change with TLS 1.3.<\/p>\n

TLS 1.3 cuts the journey with a single round trip handshake, thereby cutting the handshake time by half. This results in reduced TTFB (time to first byte) and improved latency. For domains where connection speed is of paramount importance, this handshake is going to come very handily.<\/p>\n

As good as it is, 1-RTT is not the most talked about feature of TLS 1.3. It\u2019s the 0-RTT handshake that has grabbed the most headlines.<\/p>\n

Now you might be wondering how a TLS handshake can take place without a single round trip. Well, it can. If the server and client have come across each other before, there will be zero round trips in between them. Needless to say, this will do wonders as far as the latency is concerned.<\/p>\n

Security Enhancements<\/h3>\n

The past hurts us not only in the physical world but also in the virtual world. So many times, we’ve seen attackers targeting older, unpatched security vulnerabilities. TLS 1.2 and its predecessors feature these kinds of vulnerabilities, which could potentially be exploited.<\/p>\n

With TLS 1.3, potentially vulnerable algorithms, ciphers, and protocols will no longer be supported. This gives a massive boost to our security, and it’s an enormous disappointment for hackers and fraudsters.<\/p>\n

Here are some of the older, insecure ciphers and algorithms discontinued in TLS 1.3:<\/p>\n