On 02/23/2013 09:05 PM, Brandon Allbery wrote:
On Sat, Feb 23, 2013 at 1:58 PM, C K Kashyap <ckkash...@gmail.com> wrote:

What I am really looking for is a small sample code that demonstrates how
TLS package can be used to connect to a webserver or imapserver.

TLS isn't actually SSL, despite SSL getting blessed as "TLS 0.9". Various
attempts at TLS-enabled web protocols have foundered, so you won't find
much code to speak TLS to web servers. (SSL is negotiated at socket connect
time and involves no protocol commands.) In short, sample code that can do
https would be completely useless for comparing to TLS-enabled code.

SSL and TLS can be negociated at socket connect. TLS is just the standard name of SSL. at the wire level, TLS1.x is SSL 3.(1+x).

What you're refering to is the STARTTLS style protocol command which work independently of the version of TLS (include SSL2, SSL3).

Many programs have abused "SSL" and "TLS" different name to differentiate how TLS is negociated (straight away, or with a protocol command). Fortunately more and more programs do the right thing and differentiate the two types with the following two options: "SSL/TLS" or "STARTTLS".

--
Vincent

_______________________________________________
Haskell-Cafe mailing list
Haskell-Cafe@haskell.org
http://www.haskell.org/mailman/listinfo/haskell-cafe

Reply via email to