# What Is TLS (Transport Layer Security)? Definition and Examples

> TLS (Transport Layer Security) is the IETF standard protocol that encrypts and authenticates network connections, including every HTTPS connection.

Source: https://ssl.sh/glossary/tls/
Last updated: 2026-11-10

TLS is the successor to [SSL](https://ssl.sh/glossary/ssl/) and sits between TCP and an application protocol such as HTTP, SMTP or IMAP; QUIC reuses the TLS 1.3 handshake. A connection starts with a [handshake](https://ssl.sh/glossary/tls-handshake/) in which client and server agree on a version and cipher suite, the server proves its identity with an X.509 certificate, and both sides derive shared session keys. Application data is then encrypted and integrity-protected. The versions in use are TLS 1.2 (RFC 5246, 2008) and [TLS 1.3](https://ssl.sh/glossary/tls-1-3/) (RFC 8446, August 2018).

## Why it matters
TLS protects passwords, cookies and API tokens from eavesdropping and tampering on untrusted networks, and certificate authentication stops an attacker from impersonating the server. Version choices matter: TLS 1.0 and 1.1 were removed from Chrome 84, Edge 84 and Firefox 78 in 2020 and formally deprecated by RFC 8996 in March 2021. TLS 1.3 removed static RSA key exchange and non-AEAD ciphers, so every TLS 1.3 connection has forward secrecy, and a full handshake needs one round trip instead of two.

## Example
Check whether a server supports TLS 1.3:

```bash
openssl s_client -connect example.com:443 -servername example.com -tls1_3 </dev/null
```

If it does, the output reports TLSv1.3 and the negotiated cipher suite; a handshake failure means only older versions are offered.

## Common misconceptions
- **TLS hides which website you visit.** The destination IP is visible, and the hostname travels in cleartext in the SNI extension unless Encrypted Client Hello is used.
- **A site that uses TLS is trustworthy.** TLS only proves you reached the holder of a certificate for that hostname; phishing sites use TLS too.
- **TLS 1.2 is insecure.** TLS 1.2 limited to ECDHE key exchange and AEAD cipher suites remains widely accepted; the versions to retire are 1.0 and 1.1 and legacy algorithms.

## Related terms

- [SSL](https://ssl.sh/zh/glossary/ssl/): SSL 是 Netscape 在上世纪 90 年代设计的加密传输协议，已被 TLS 完全取代，如今“SSL”多半只是 TLS 和证书的习惯叫法。
- [TLS 1.3](https://ssl.sh/zh/glossary/tls-1-3/): TLS 1.3 是当前最新的传输层安全协议版本（2018 年的 RFC 8446，现行规范为 RFC 9846），完整握手只需一个往返，且只保留 AEAD 加密算法。
- [TLS 1.2](https://ssl.sh/zh/glossary/tls-1-2/): TLS 1.2 是 2008 年由 RFC 5246 定义的 TLS 版本，引入了基于 SHA-256 的密钥派生和 AES-GCM 等 AEAD 加密算法，至今仍被广泛使用。
- [TLS 握手](https://ssl.sh/zh/glossary/tls-handshake/): TLS 握手是 TLS 连接开始时的一组消息交换，客户端与服务器在其中协商协议版本和密码套件、验证服务器身份并派生会话密钥。
- [密码套件](https://ssl.sh/zh/glossary/cipher-suite/): 密码套件是 TLS 客户端和服务器协商使用的一组命名的加密算法组合，例如 TLS_AES_128_GCM_SHA256，决定连接用什么算法保护数据。
- [HTTPS](https://ssl.sh/zh/glossary/https/): HTTPS 是在 TLS 加密连接之上传输的 HTTP，默认使用 443 端口，使网页内容、Cookie 和表单数据被加密，并验证服务器身份。
- [前向保密](https://ssl.sh/zh/glossary/forward-secrecy/): 前向保密是密钥交换的一种安全属性：即使服务器的长期私钥日后泄露，过去连接的会话密钥也不会因此暴露。
