RFC 6066 Quiz

TLS Extensions

🇺🇸 🇯🇵

0 / 0

References (URLs)

RFC 6066: Transport Layer Security (TLS) Extensions

Goal: know what extensions do and how SNI affects deployment and privacy.

Show explanation immediately Show all answers

Q1: The main purpose of TLS extensions is to

Multiple Choice

A. Replace certificates B. Add optional capabilities in a backward compatible way C. Disable negotiation

**Explanation:** **Correct (B):** Extensions let clients and servers negotiate additional features without breaking older implementations

Q2: In virtual hosting, which extension helps the server choose the right certificate for a hostname

Multiple Choice

A. server_name B. cookie C. transfer_encoding

**Explanation:** **Terms:** SNI **Correct (A):** The server_name extension carries the hostname so the server can select the right cert

Q3: A privacy tradeoff commonly discussed about SNI is

Multiple Choice

A. It prevents TLS from using encryption B. It forces HTTP/1.1 semantics C. The hostname can be observable to on path entities depending on TLS version and deployment

**Explanation:** **Correct (C):** The hostname indication can leak metadata even when payload is encrypted

Q4: A well designed extension negotiation should (select all)

Multi-Select

A. Allow the peer to ignore unknown extensions B. Be explicit about when an extension is required vs optional C. Define security considerations for the added feature D. Assume every extension is safe by default

**Explanation:** **Correct (A,B,C):** Extensibility should not become a downgrade or interop hazard **Options:** - D (incorrect): Extensions can add attack surface

Q5: A practical reason an ops team cares about SNI is

Multiple Choice

A. It makes TCP unnecessary B. It enables many hostnames to share one IP while still serving the right certificate C. It makes cookies obsolete

**Explanation:** **Correct (B):** Without SNI, virtual hosting with different certs is much harder

Q6: Name the TLS extension that carries the hostname (one word with underscore)

Short Text

**Explanation:** **Correct:** server_name