# Modern Encryption with TLS 1.3: Why the old green padlock is no longer enough

Everyone knows the padlock icon in the top left corner of the browser's address bar. It tells you that the website is secure and your credit card details can't be easily stolen. But what exactly happens behind that padlock? The answer is TLS (Transport Layer Security).

## The evolution from SSL to TLS

In the early days of the internet, SSL (Secure Sockets Layer) was used to encrypt data. This technology is now severely outdated, cracked, and considered highly insecure. SSL was succeeded by TLS. For years, TLS version 1.2 was the gold standard, but technology doesn't stand still. In 2018, TLS 1.3 was introduced, revolutionizing both security and speed.

## What was the problem with TLS 1.2?

Even though TLS 1.2 worked well, it had two major drawbacks:

- Too many choices (Ciphers): TLS 1.2 supported dozens of different cryptographic algorithms (called cipher suites). Many of these older algorithms proved vulnerable to advanced cyberattacks over the years. As long as a server supported them, hackers could attempt to 'downgrade' connections to this weak encryption.

- Slow connections: To establish a secure connection via TLS 1.2, the browser and server had to send data back and forth multiple times (round-trips) before agreeing on the secret keys. This added precious milliseconds to a website's load time, especially on mobile networks (high latency).

## The power of TLS 1.3

TLS 1.3 took the scissors and ruthlessly cut all outdated and vulnerable algorithms from the protocol. There is no more room for weak encryption. When you connect via TLS 1.3, you are guaranteed to be using the most modern mathematical cryptography currently known.

Additionally, the "handshake" (the introduction between your browser and the server) has been optimized. It now only requires one round-trip instead of two. This might sound like a minor difference, but it makes the web measurably faster, especially when combined with fast HTTP/3 connections.

## Check your own security posture

Not every website or browser has made the switch to TLS 1.3 yet. Old corporate networks or outdated devices often remain stuck on 1.2. On our Coenraad.eu Dashboard, under the 'Security Posture' section, you can see exactly which version of TLS your current session is using, including the specific Cipher algorithm handling the encryption.

Do you see TLS 1.3? Then you can be certain your data is optimally protected against eavesdropping.