TECHNOLOGY 

Published on
KembaraXtra- Computer Science - Application Protocols
This study guide summarizes key application protocols for the Tech+ exam, focusing on identification and secure alternatives.
I. Website Protocols
  • HTTP (Hypertext Transfer Protocol): Used for websites. Transmits web page elements (text, graphics, etc.) between web server and client (browser). Insecure: Data is unencrypted; susceptible to eavesdropping.
  • HTTPS (Hypertext Transfer Protocol Secure): Secure version of HTTP. Uses encryption (TLS/SSL) to protect data in transit, preventing eavesdropping. Crucial for confidentiality.
Exam Tip: Understand the security implications of HTTP vs. HTTPS. Eavesdropping is a major confidentiality risk; HTTPS is a key control against it.
II. Email Protocols
Email involves multiple protocols:
  • SMTP (Simple Mail Transfer Protocol): Used to send email messages between mail servers.
  • Receiving Email Protocols: Clients use these to retrieve emails from the server.
    • HTTPS: Used by webmail clients (like Gmail) for both sending and receiving. Provides security.
    • POP3 (Post Office Protocol version 3): Downloads emails to the client and deletes them from the server. Older protocol; less flexible. Has a secure version, POP3S (using SSL/TLS).
    • IMAP (Internet Message Access Protocol): Keeps emails on the server; client accesses them. Allows access from multiple devices. Has a secure version, IMAPS.
Exam Tip: Know the differences between POP3 and IMAP, especially regarding email storage location and access. Understand that secure versions (POP3S, IMAPS, SMTPS) add encryption.
III. File Transfer and Administrative Protocols
  • FTP (File Transfer Protocol): Original protocol for transferring files between clients and servers. Insecure: lacks built-in security.
  • SFTP (Secure File Transfer Protocol): Secure version of FTP, utilizing SSH for encryption.
  • FTPS (File Transfer Protocol Secure): Another secure FTP variant, using either SSL/TLS or SSH for encryption.
  • SSH (Secure Shell): Used for secure command-line access to remote systems. Provides strong authentication and encryption.

IV. Summary Table of Protocols and Security

Protocol

Purpose

Secure Version(s)

Security Level

HTTP

Web browsing

HTTPS

Insecure

HTTPS

Secure web browsing

Secure

SMTP

Sending email between servers

SMTPS

Insecure/Secure

POP3

Receiving email (downloads & deletes)

POP3S, POP3 over TLS

Insecure/Secure

IMAP

Receiving email (server-side storage)

IMAPS

Insecure/Secure

FTP

File transfer

SFTP, FTPS

Insecure

SFTP

Secure file transfer

Secure

FTPS

Secure file transfer

Secure

SSH

Secure remote shell access

Secure

This table summarizes the protocols and their secure counterparts. Focus on understandin

Picture
0 Comments