VPNS, Secure Protocols, Email Security, Wireless

IPsec

Internet Protocol Security (IPsec) - Suite of protocols that secures IP communications by providing encryption, authentication, and integrity. Commonly used for VPNs. (Think: VPN security.)

IKE

Internet Key Exchange (IKE) - Protocol used to negotiate and establish secure connections and exchange cryptographic keys for IPsec VPNs. (Think: Builds the VPN tunnel.)

ESP

Encapsulating Security Payload (ESP) - IPsec protocol that provides encryption, authentication, integrity, and replay protection. (Think: Encrypts VPN traffic.)

AH

Authentication Header (AH) - IPsec protocol that provides authentication and integrity but does NOT encrypt data. (Think: Authentication only.)

SSH

Secure Shell (SSH) - Secure protocol for remote command-line access and administration. Replaces Telnet. (Think: Secure remote login.)

SFTP

SSH File Transfer Protocol (SFTP) - Secure file transfer protocol that runs over SSH. (Think: FTP over SSH.)

FTPS

File Transfer Protocol Secure (FTPS) - FTP secured using SSL/TLS encryption. (Think: FTP + TLS.)

SNMP

Simple Network Management Protocol (SNMP) - Protocol used to monitor and manage network devices. SNMPv3 adds encryption and authentication. (Think: Network monitoring.)

SMTP

Simple Mail Transfer Protocol (SMTP) - Protocol used to send email from clients to mail servers and between mail servers. (Think: SMTP Sends Mail.)

POP3

Post Office Protocol version 3 (POP3) - Retrieves email by downloading messages from the server, often removing them afterward. (Think: Downloads mail.)

IMAP

Internet Message Access Protocol (IMAP) - Retrieves and synchronizes email while leaving messages on the server. (Think: Syncs mail across devices.)

SPF

Sender Policy Framework (SPF) - Email authentication method that verifies which mail servers are authorized to send mail for a domain. (Think: Who can send?)

DKIM

DomainKeys Identified Mail (DKIM) - Uses digital signatures to verify that an email was not altered and came from the claimed domain. (Think: Signs email.)

DMARC

Domain-based Message Authentication, Reporting, and Conformance (DMARC) - Email policy that tells receiving servers what to do if SPF or DKIM checks fail. (Think: SPF/DKIM policy.)

S/MIME

Secure/Multipurpose Internet Mail Extensions (S/MIME) - Uses digital certificates to encrypt and digitally sign email. (Think: Secure email with certificates.)

STARTTLS

Start Transport Layer Security (STARTTLS) - Command that upgrades a plaintext email connection to an encrypted TLS connection. (Think: Starts plain, becomes encrypted.)

SMTPS

Simple Mail Transfer Protocol Secure (SMTPS) - SMTP operating over an encrypted SSL/TLS connection. (Think: Secure SMTP.)

WEP

Wired Equivalent Privacy (WEP) - Original Wi-Fi security protocol that is now considered insecure. (Think: Broken Wi-Fi security.)

WPA

Wi-Fi Protected Access (WPA) - Improved wireless security protocol replacing WEP. Uses TKIP. (Think: Better than WEP.)

WPA2

Wi-Fi Protected Access II (WPA2) - Wireless security protocol using AES with CCMP encryption. (Think: Most common secure Wi-Fi.)

WPA3

Wi-Fi Protected Access III (WPA3) - Latest wireless security protocol using SAE authentication and stronger encryption. (Think: Newest Wi-Fi security.)

PSK

Pre-Shared Key (PSK) - Shared password used to authenticate users in WPA/WPA2 Personal networks. (Think: Home Wi-Fi password.)

SAE

Simultaneous Authentication of Equals (SAE) - WPA3 authentication method replacing PSK that provides stronger protection against password attacks. (Think: WPA3 authentication.)

TKIP

Temporal Key Integrity Protocol (TKIP) - Legacy encryption protocol used with WPA. Less secure than AES/CCMP. (Think: Old WPA encryption.)

CCMP

Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) - AES-based encryption protocol used by WPA2. (Think: WPA2 encryption.)

802.1X

IEEE 802.1X Port-Based Network Access Control - Enterprise authentication framework commonly used with RADIUS for wired and wireless networks. (Think: Enterprise Wi-Fi login.)