diff options
author | Tobias Nießen <tniessen@tnie.de> | 2022-01-24 22:50:37 +0300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2022-01-24 22:50:37 +0300 |
commit | 3657c14598866e69f2fd97a5565cabf17d5ec675 (patch) | |
tree | aaf720289cf3a61057192becafcca4760df0ba3a /doc/api/tls.md | |
parent | ce41395f89414dfd459084ea61a7eeac1f67713a (diff) |
doc: improve TLS/SSL introduction
PR-URL: https://github.com/nodejs/node/pull/41649
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Darshan Sen <raisinten@gmail.com>
Diffstat (limited to 'doc/api/tls.md')
-rw-r--r-- | doc/api/tls.md | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/doc/api/tls.md b/doc/api/tls.md index de85421deb5..24c7ea74280 100644 --- a/doc/api/tls.md +++ b/doc/api/tls.md @@ -16,8 +16,9 @@ const tls = require('tls'); ## TLS/SSL concepts -The TLS/SSL is a public/private key infrastructure (PKI). For most common -cases, each server must have a _private key_. +TLS/SSL is a set of protocols that rely on a public key infrastructure (PKI) to +enable secure communication between a client and a server. For most common +cases, each server must have a private key. Private keys can be generated in multiple ways. The example below illustrates use of the OpenSSL command-line interface to generate a 2048-bit RSA private @@ -129,8 +130,8 @@ servers can accommodate both, choosing either of them during the normal cipher negotiation step. TLS-PSK is only a good choice where means exist to securely share a -key with every connecting machine, so it does not replace PKI -(Public Key Infrastructure) for the majority of TLS uses. +key with every connecting machine, so it does not replace the public key +infrastructure (PKI) for the majority of TLS uses. The TLS-PSK implementation in OpenSSL has seen many security flaws in recent years, mostly because it is used only by a minority of applications. Please consider all alternative solutions before switching to PSK ciphers. |