GeezerVison is showing github.com — doc: improve TLS/SSL introduction · nodejs/node@b9d1cb7
File tree
Expand file treeCollapse file tree
Open diff view settings
Expand file treeCollapse file tree
Open diff view settings
Collapse file
Copy file name to clipboardExpand all lines: doc/api/tls.md +5-4Lines changed: 5 additions & 4 deletions - Display the source diff
- Display the rich diff
| Original file line number | Diff line number | Diff line change |
|---|
@@ -16,8 +16,9 @@ const tls = require('tls'); |
16 | 16 |
|
17 | 17 | ## TLS/SSL concepts |
18 | 18 |
|
19 | | -The TLS/SSL is a public/private key infrastructure (PKI). For most common |
20 | | -cases, each server must have a _private key_. |
| 19 | +TLS/SSL is a set of protocols that rely on a public key infrastructure (PKI) to |
| 20 | +enable secure communication between a client and a server. For most common |
| 21 | +cases, each server must have a private key. |
21 | 22 |
|
22 | 23 | Private keys can be generated in multiple ways. The example below illustrates |
23 | 24 | use of the OpenSSL command-line interface to generate a 2048-bit RSA private |
@@ -129,8 +130,8 @@ servers can accommodate both, choosing either of them during the normal cipher |
129 | 130 | negotiation step. |
130 | 131 |
|
131 | 132 | TLS-PSK is only a good choice where means exist to securely share a |
132 | | -key with every connecting machine, so it does not replace PKI |
133 | | -(Public Key Infrastructure) for the majority of TLS uses. |
| 133 | +key with every connecting machine, so it does not replace the public key |
| 134 | +infrastructure (PKI) for the majority of TLS uses. |
134 | 135 | The TLS-PSK implementation in OpenSSL has seen many security flaws in |
135 | 136 | recent years, mostly because it is used only by a minority of applications. |
136 | 137 | Please consider all alternative solutions before switching to PSK ciphers. |
|