Re: SSH and SSL - which positions do they occupy in the OSI model?

From: Dimitri Maziuk (dima@127.0.0.1)
Date: 10/05/02


From: Dimitri Maziuk <dima@127.0.0.1>
Date: Sat, 5 Oct 2002 00:06:55 +0000 (UTC)

thus spake NeXTstep:
> Hello,
>
> Which position of the OSI model, do SSL and SSH occupy?

If TCP/IP used OSI model, SSL would fit into session layer.
However, TCP/IP designers couldn't quite figure out the use
for session & presentation layers: there was no SSL back then,
and (presentation layer) they weren't going to convert EBCDIC
to ASCII or little- to big-endian inside the network stack. So
they laughed at "unnecessarily complex" OSI model "designed by
committee", and used a simpler 4-layer model for TCP/IP.

And then came little-endian computers and encryption. And the
code to support them had to be built in/linked to each individual
application because it didn't quite fit in TCP/IP stack.

Main advantage of the simpler TCP/IP model is that it simplifies
one's homework: for all $foo in TCP/IP, there's a 99% chance that
$foo is in application layer. All one has to remeber is 1% that
isn't.

HTH, HAND

Dima

-- 
...the mainstream products of major vendors largely ignore these demonstrated
technologies...  [Instead, their customers] are left with several ineffective
solutions collected under marketing titles like "defense in depth".
             -- Thirty Years Later: Lessons from the Multics Security Evalution



Relevant Pages

  • Re: [urgent] which OSI layer is SSL located?
    ... >But shouldn't there be a way of comparing OSI model against TCP/IP ... Which would all seem to suggest that there are several ways of comparing OSI ... Fax/Voice +1258-9858 | read details of WFTPD Pro for XP/2000/NT. ...
    (comp.security.misc)
  • Re: Use of SSL as a VPN
    ... A proper SSL VPN does not tunnel TCP/IP over SSL -- it allows access ... It is simply HTTPS over TCP/IP ... – no different than any other secure web connection. ...
    (sci.crypt)
  • RE: please help with SSL
    ... Subject: please help with SSL ... should point out that TCP/IP is not based on the OSI 7-layer model. ... >, while TCP is a gateway between the Transport ... > Layer and the Network Layer. ...
    (Security-Basics)
  • Re: SSL vs. SSL over tcp/ip
    ... what's the advantage/disadvantage when comparing them? ... Can I say that on top of old tcp/ip application, we can add SSL on top ... From the fact that this CGI program has been written in Haskell, ...
    (comp.security.misc)
  • SSL vs. SSL over tcp/ip
    ... What's the difference between implementing pure SSL vs. SSL over tcp/ ... what's the advantage/disadvantage when comparing them? ... Can I say that on top of old tcp/ip application, we can add SSL on top ...
    (comp.security.misc)