TLS
What is TLS?
Transport Layer Security, a cryptographic protocol that provides end-to-end encryption for data transmitted over networks, succeeding SSL.
Terms that appear alongside tls
Each of these is named in at least one of the same controls as tls. The number is how many controls name both.
- authentication 27 shared controls
- encryption 27 shared controls
- nist 21 shared controls
- ipsec 19 shared controls
- integrity 15 shared controls
- key management 15 shared controls
- access control 13 shared controls
- fips 13 shared controls
Frameworks that govern tls
What the standards actually require on tls
Requirements naming tls across 6 standards, quoted from the control text.
Techniques are evaluated in a common framework; the ready techniques are integrity-only (unencrypted) TLS and sharing the private key with the inspection device, and the practical considerations for each end in recommendations to mitigate the risks they introd...
iec-62351-power-systems-communication-security::90-2:8 · Part 90-2, clauses 7, 8 and 12: evaluation framework, ready techniques (unencrypted TLS, private key sharing) and practical considerations with risk mitigation recommendations →Agencies should obtain legal advice about their gateways inspecting encrypted TLS traffic.
new-zealand-information-security-manual-nzism::14.3.9.C.01 · 14.3.9.C.01 Legal advice on TLS inspection →When using DH or ECDH for key establishment of TLS connections, the ephemeral variant is used.
ISM-1448 · Ephemeral DH and ECDH for TLS →5G SBI between Network Functions must be protected using TLS 1.2 or higher with mutual authentication via certificates. Direct communication may use OAuth 2.0 for service authorization.
33.501-13.1 · Service-Based Architecture Security (TLS) →Controls monitor TLS configurations so that changes are spotted and a secure configuration is maintained. The assessor observes the monitoring and maintenance and interviews personnel.
pci-3ds-core-security-standard::P2-5.3.4 · P2-5.3.4 TLS configurations monitored for change →The CSfC programme compresses the per-technology timeline into one: in 2026 NIAP updates the relevant protection profiles and CSfC adds CNSA 2.0 and software and firmware signing to the Mobile Access, Campus WLAN, Multi-Site Connectivity and Data-at-Rest capab...
nsa-guidance-for-transition-to-quantum-resistant-cryptography::Q-CSFC · Q-CSFC CSfC transition: CNSA 2.0 objective in 2026, required in capability packages from 2028, all registered solutions post-quantum by 2030, TLS 1.3 throughout →Questions people ask about tls
What is TLS?
Why is TLS important for compliance?
Which compliance frameworks address TLS?
Where can I learn more about TLS?
See how TLS applies across compliance frameworks
Our platform maps 1,049 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.