SSL/TLS protection is transparent to applications.

• A. True
• B. False
• C. Sometimes
• D. Not applicable

Answer: (B)

TLS protection isn’t fully transparent to applications. While encryption and integrity are provided for data in transit, the application still interacts with TLS: it must create and configure a TLS context, initiate and manage the handshake, verify server certificates, handle TLS alerts and session state, and respond to potential handshake or protocol errors. Even if you use a secure socket or TLS library that abstracts many details, the app relies on TLS APIs and must accommodate certificate validation, cipher negotiation, and possible renegotiations. So, although data is protected, the application isn’t completely unaware of TLS operations, making the statement false.