Encryption Protocol TLS 1.3 Released.

The Internet Engineering Task Force (IETF) —the organization that approves proposed Internet standards and protocols has approved TLS 1.3 as the next version of the Transport Layer Security (TLS) protocol.  TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery.

How Does This Pertain to SSL Certificates?

In short, Technically Nothing.

The term SSL certificate has been used for the purposes of marketing since the creation of the digital certificates.  SSL just like TLS are actually protocols that utilize a digital certificates public & private keypair .

A digital certificate keypair by itself  is  nothing more than a place holder of 2048 bits or greater and is needed in order to perform encryption and validation. A protocol is the actual function of encryption that initializes that keypair to start encryption, such as the TLS or SSL Protocols. These protocols are set up and chosen on the server side by a server admin. Since TLS  or SSL  are protocol functions on the server and not pertaining to the digital certificate’s keypair it is uncertain why the industry calls Digital Certificates as SSL Certificates because of this principle. All SSL protocols that were all available are now perceived as a vulnerable protocol leaving only TLS until something better eventually comes up.

What is a Protocol or a Cipher?

What to Expect Technically?

Personal Recommendations…

Admins should definitely look into applying the TLS 1.3 functionality to their systems by contacting their server venders. Just as new protocols get released they also expire. SSL protocol versions 1, 2, and 3 should not longer be used. The best practice currently is to use TLS protocols – TLS 1.0, TLS 1.1 and TLS 1.2.

Admins should ensure through your server vender that they have the proper configurations to provide maximum protection against skilled and determined attackers. Especially for applications handling sensitive data or performing critical operations. Security is ever evolving and if admins become placid in their security they are doomed to opening their infrastructure to exploitations.