The standard it self states that SSL sits on top of a reliable transport
mechanism. Does it mean it is part of the transport or the session layer,
the standard it self does not say exactly? Does it means that it is in
between, who knows, the standard does not say either.
If you look at SSL in detail, you will that there is a sub protocol at the
application layer that is part of SSL and SSL itself sits on top of a
reliable transport mechanism.
Clement
***** MODERATOR'S NOTE:
This question seems to come up over and over again. There is no cut and
dried answer. Remember that the OSI Model is just that - a MODEL. There is no
requirement for an application or protocol to fit smoothly into one layer
versus another.
If this question were to appear on an exam, I would answer it as best you
can and complete one of the forms provided at the exam which allows you to
contest a question. Contesting it won't change your grade on the question, but
it will bring a bad question to the attention of the test coordinators and
perhaps get it reworded or removed from future test booklets.
Kate Wakefield, CISSP
CISSP-Discuss co-moderator
------------------------ Yahoo! Groups Sponsor --------------------~-->
$9.95 domain names from Yahoo!. Register anything.
http://us.click.yahoo.com/J8kdrA/y20IAA/yQLSAA/kgFolB/TM
--------------------------------------------------------------------~->
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/CISSP-Discuss/
<*> To unsubscribe from this group, send an email to:
CISSP-Discuss-unsubscribe@yahoogroups.com
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
