基于SSL/TLS的安全应用中独立端口和磋商升级的研究与实现  

SSL/TLS-Based Research and Implementation of Separate Port and Upward Negotiation in Security Applications

作　　者：邓晓军[1] 陈怀义[2] 

机构地区：[1]湖南工业大学信息工程系,湖南株洲412000 [2]国防科技大学计算机学院,湖南长沙410073

出　　处：《计算机工程与科学》2006年第4期23-25,83,共4页Computer Engineering & Science

摘　　要：基于SSL/TLS构建的安全应用中通常采用了独立端口和磋商升级的策略。本文详细论述了这两种策略的基本原理,比较了它们各自的优缺点,进而对实施过程中遇到降级攻击以及因代理语义不能交互而导致连接失败的问题进行了分析,并针对这些问题提出了相应的解决办法。Most SSL/TLS-based security applications adopt two strategies： the separate port strategy and the upward negotiation strategy. This paper discusses the principle of the two strategies and compares the advantages and disadvantages of the two, and then analyzes the problems of downgrade attacks and the difference of semantics causing connection failures which emerge when the two strategies are being implemented. And the solutions to these problems are also promoted.

关 键 词：SSL TLS 独立端口 磋商升级 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]