SSL/TLS was developed for ________ VPNs.

• A. host-to-host
• B. site-to-site
• C. Both A and B
• D. Neither A nor B

Answer: (A)

SSL/TLS was designed to secure a session between two endpoints, typically a client and a server, such as a web browser talking to a web server. This end-to-end, host-to-host protection focuses on the channel between two hosts rather than across entire networks. Site-to-site VPNs, by contrast, secure traffic between gateways that connect entire networks, effectively protecting network-to-network traffic rather than a single host’s connection. Since TLS operates at the level of an end-to-end session between two hosts, the host-to-host model is the natural fit. That’s why the best answer is host-to-host.