SSL (Secure Sockets Layer (deprecated))

Secure Sockets Layer was the predecessor to TLS, originally developed by Netscape. SSL 2.0 (1995) and SSL 3.0 (1996) both have known cryptographic flaws, most famously POODLE against SSL 3.0, and are deprecated by RFC 7568. Any production system still permitting SSL must be upgraded to TLS 1.2 or, preferably, TLS 1.3.

Categories: SignalingSecurity ControlsProtocols and Standards

SSL in context

Signaling protocols carry the control-plane instructions that set up calls, register subscribers, hand over sessions and route SMS. SS7, Diameter, GTP-C and SIP are the four dominant families, and interconnect exposure of any of them is treated by GSMA FS.11 / FS.19 / FS.20 as a top-tier telecom risk.

Security controls in telecom span signaling firewalls (SS7/Diameter/GTP screening at the network edge), transport encryption (IPsec, TLS, PRINS), identity and access on OSS/BSS, and monitoring at both the packet and log level. Controls are audited against GSMA FS.11/FS.19/FS.20/FS.36 and, in Europe, NIS2 sectoral rules.

To place SSL in the wider telecom-security picture, review SIP Digest, CAMARA Project, Management Plane, RPKI, SHA and STIR.

Related terms

Related topic hubs

  • SS7 Security SS7/MAP/CAP/SCCP attacks and defenses across 2G/3G interconnect.
  • Signaling Firewall Unified SS7/Diameter/GTP/SMS signaling firewall framework.
  • SEPP Security N32-c/N32-f, PRINS, JWE and OAuth 2.0 at the 5G roaming edge.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.