TLS (HTTPS) provides which guarantees?
Options
- Only the encryption of data while it is in transit
- Confidentiality, integrity and server identity checks (Correct option)
- Protection against XSS attacks in every page served
- Login authentication for every visitor by default
Answer
Confidentiality, integrity and server authentication (via certificates)
Why
TLS gives three guarantees for data traveling over the network:
- Confidentiality: it is encrypted, so others cannot read it.
- Integrity: it cannot be modified without detection.
- Authentication: the certificate proves you reached the real server.
It does NOT protect against bugs in your app (XSS, SQL injection) or prove who the user is.
Remember
TLS = private, untampered, real server.