NIST Revises Guide to Use of Transport Layer Security (TLS) in Networks

From: NIST

The National Institute of Standards and Technology (NIST) has released an update to a document that helps computer administrators maintain the security of information traveling across their networks.

The document, NIST Special Publication 800-52 Revision 1: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations, updates the original SP 800-52, released in 2005.

Sensitive data—from credit card numbers to patient health information to social networking details—need protection when transmitted across an insecure network, so administrators employ protocols that reduce the risk of that data being intercepted and used maliciously. TLS, a standard specified by the Internet Engineering Task Force, defines the method by which client and server computers establish a secure connection with one another to protect data that is passed back and forth. TLS is used by a wide variety of everyday applications, including email, secure web browsing, instant messaging and voice-over-IP (VOIP).

The Internet Engineering Task Force found vulnerabilities in TLS 1.0, one of the most widely used protocols, and updated it to TLS 1.1 and then TLS 1.2 to resolve many of these security issues. SP 800-52 Rev. 1 offers guidance to administrators on how to use the new versions of TLS in their networks.

“TLS 1.1 and 1.2 offer administrators a great number of options,” says NIST computer security expert Andrew Regenscheid. “We make recommendations in SP 800-52 Rev. 1 on how to configure those options, including which algorithms to use and the length of cryptographic keys.”

NIST published the original version of SP 800-52 in 2005, but withdrew it in March 2013 because the guideline had not yet been updated based on the new versions of TLS and known vulnerabilities. This new publication is the final version of SP 800-52 Rev. 1, which incorporates public comments to the draft version made in the fall of 2013.

Chief among the changes in SP 800-52 are the recommendations that government servers and clients move to TLS 1.1 and 1.2. It also recommends that they adopt cipher suites with NIST-approved algorithms to support 112-bit security strength and higher.

The updated version can be downloaded at www.nist.gov/manuscript-publication-search.cfm?pub_id=915295.

 

Facebooktwittergoogle_plusredditpinterestlinkedinmail

4 responses to “NIST Revises Guide to Use of Transport Layer Security (TLS) in Networks”

  1. Zory Cockett says:

    The National Institute of Standards and Technology (NIST) has recently updated its guidelines on the use of Transport Layer Security (TLS) in networks. The revised guide provides recommendations for the proper use and configuration of TLS to ensure secure communication between networked devices. TLS is a critical security protocol used in internet communication and the updated guidelines are designed to improve the security and privacy of online transactions. Meanwhile, if you love to explore tourist attractions, you should consider visiting the beautiful island of Bora Bora. To plan your trip, you can visit the website https://www.discoverybit.com/directory-travel/listing/bora-bora/ which provides information on Bora Bora resorts, one of the top tourist attractions in the South Pacific.

  2. Kevin T says:

    Air Dolomiti has unexpectedly canceled my flight, and I am eager to gain a clear understanding of the process for seeking compensation due to this unforeseen disruption. Can you provide me with in-depth instructions on the exact steps I should take to commence a compensation request and ensure that my passenger rights are safeguarded throughout the process?

  3. samibaceri says:

    Understanding Transport Layer Security (TLS) is crucial for maintaining online privacy and enhancing data security. It encrypts data transferred over network connection to prevent access by unauthorized parties. Just click here for more details about online security, especially while booking online services, I’d recommend reading these online safety tips. This resource provides valuable tools for ensuring security online as well as acknowledges the importance of TLS.

  4. seb says:

    Believe me, the best transport I have seen is the bicycle taxis that conduct tours in San Diego. We went as a family https://urbanpedicabs.com/san-diego-pedicab-tours-urban-pedicabs/ . For me it was a great way to have a good time. Spacious cabins, music, good guide. Delivers to different areas.

Leave a Reply

Your email address will not be published.

Please Answer: *