What does SSL stand for?
SSL stands for Secure Sockets Layer. Secure Sockets Layer, the deprecated predecessor of TLS. Finding SSL or early TLS versions enabled is a common vulnerability scan result.
SSL was the original protocol for encrypting web traffic, developed by Netscape in the 1990s. Its last version, SSL 3.0, has known weaknesses and was formally prohibited in 2015; its successor is TLS. The name outlived the protocol: people still say SSL certificate and SSL VPN when the connection actually uses TLS. On an exam, treat every real SSL version as obsolete and insecure, and TLS 1.2 or 1.3 as the expected answer.
SSL in practice: an example
A vulnerability scan flags an old web server that still accepts SSL 3.0 connections. The fix is not a new certificate: the administrator disables SSL 3.0 and the early TLS versions in the server configuration, leaving TLS 1.2 and 1.3.
What SSL is confused with
SSL vs TLS: what is the difference?
TLS is the successor to SSL and the only one that should be in use. The certificates are the same; what changed is the protocol that uses them. What TLS stands for
SSL vs SSH: what is the difference?
SSL and TLS protect application traffic such as HTTPS and rely on certificates issued by certificate authorities. SSH is a separate protocol for remote login and file transfer, with its own key system. What SSH stands for
Which exams cover SSL?
SSL is on the official CompTIA acronym list for two of the four exams covered here.
- CySA+ CS0-004: on the acronym list, not tied to one objective.
- Network+ N10-009: 1.0 (Networking Concepts). Listed there as “Secure Socket Layer”.
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. A scanner reports that a server supports SSL 3.0. What is the correct remediation?
- Disable SSL 3.0 and require TLS 1.2 or later
- Buy a certificate with a longer key
- Move the site to port 8443
- Enable SSL 2.0 as a fallback
Show the answer
A. Disable SSL 3.0 and require TLS 1.2 or later. The weakness is in the protocol version, so it has to be switched off. A new certificate or a different port leaves the vulnerable protocol available.
2. A vendor sells an “SSL certificate”. Which protocol will a modern browser actually use with it?
- SSL 3.0
- TLS
- SSH
- IPsec
Show the answer
B. TLS. The product is an X.509 certificate, and it works with TLS. The SSL name is a habit; current browsers no longer negotiate SSL.
Sources: RFC 6101: The Secure Sockets Layer (SSL) Protocol Version 3.0; RFC 7568: Deprecating Secure Sockets Layer Version 3.0; RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3; NIST glossary: Secure Sockets Layer. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.