Which is true regarding tracing Secure Socket Layer (SSL) and Transport Layer Security (TLS) connections?

Question

Options

• ATLS is more difficult to trace due to the encryption of the message source routing
• BThe connection source and destination can be traced in both cases because the message header is
• CThe connection recipient can be traced in both cases, but the source cannot.
• DAn SSL connection can be traced, even with encrypted content, where the TLS connection can not be

• A
  7% (3)
• B
  76% (32)
• C
  2% (1)
• D
  14% (6)

Explanation

Option B is correct because both SSL and TLS encrypt only the payload (message content), not the IP packet headers. Network headers must remain unencrypted so routers can direct traffic - meaning the source and destination IP addresses are always visible regardless of which protocol is used.

Why the distractors are wrong:

• A is false because TLS does not encrypt routing/header information any differently than SSL - both leave IP headers exposed, making them equally traceable.
• C is wrong because the source IP is also visible in the unencrypted header; both source and destination can be traced, not just the recipient.
• D is the classic "one can, one can't" trap - SSL and TLS behave identically in this regard; neither hides the connection endpoints, so there's no asymmetry.

Memory tip: Think of SSL/TLS like a sealed envelope - the letter inside is private (encrypted content), but the envelope itself still shows the "To" and "From" addresses (IP headers) so the postal system can route it. Encryption protects what's inside, not where it's going or coming from.

No community discussion yet for this question.