GCIH · Question #172
Which of the following is the difference between SSL and S-HTTP?
The correct answer is D. SSL operates at the transport layer and S-HTTP operates at the application layer. SSL secures the entire transport-layer channel for any protocol above it, while S-HTTP is an application-layer protocol that secures individual HTTP messages.
Question
Which of the following is the difference between SSL and S-HTTP?
Options
- ASSL operates at the application layer and S-HTTP operates at the network layer.
- BSSL operates at the application layer and S-HTTP operates at the transport layer.
- CSSL operates at the network layer and S-HTTP operates at the application layer.
- DSSL operates at the transport layer and S-HTTP operates at the application layer.
How the community answered
(31 responses)- A3% (1)
- B6% (2)
- C3% (1)
- D87% (27)
Why each option
SSL secures the entire transport-layer channel for any protocol above it, while S-HTTP is an application-layer protocol that secures individual HTTP messages.
SSL does not operate at the application layer - it functions at the transport layer to provide a generic secure channel that sits beneath application protocols.
Although S-HTTP is correctly placed at the application layer in this option, SSL does not operate at the application layer - it operates at the transport layer, not alongside HTTP.
SSL does not operate at the network layer - it sits between the transport and application layers, and S-HTTP belongs at the application layer, making the layer assignments in this option reversed.
SSL (Secure Sockets Layer) operates at the transport layer, creating an encrypted tunnel between client and server that any application-layer protocol can use, independent of the message content. S-HTTP (Secure Hypertext Transfer Protocol) operates at the application layer and secures HTTP transactions individually - it encrypts and signs specific messages rather than the entire connection, making the two protocols architecturally distinct in their OSI layer placement.
Concept tested: SSL vs S-HTTP OSI layer differentiation
Source: https://www.rfc-editor.org/rfc/rfc2660
Topics
Community Discussion
No community discussion yet for this question.