0% found this document useful (0 votes)
1 views21 pages

Module 4-5 Study Notes

This document provides detailed study notes on various application layer protocols relevant for cybersecurity, including HTTP, HTTPS, SMTP, POP3, DNS, Telnet, and FTP. It explains their functionality, advantages, disadvantages, and their importance in legal contexts, particularly for understanding cybercrime and digital evidence. Additionally, it covers the Presentation Layer's role in data formatting and serialization, highlighting protocols like NDR and LPP.

Uploaded by

hashiramatsenju
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
1 views21 pages

Module 4-5 Study Notes

This document provides detailed study notes on various application layer protocols relevant for cybersecurity, including HTTP, HTTPS, SMTP, POP3, DNS, Telnet, and FTP. It explains their functionality, advantages, disadvantages, and their importance in legal contexts, particularly for understanding cybercrime and digital evidence. Additionally, it covers the Presentation Layer's role in data formatting and serialization, highlighting protocols like NDR and LPP.

Uploaded by

hashiramatsenju
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

MODULE 4-5

Computer Networking
Detailed Study Notes for Exam Preparation
Application Layer • Presentation Layer • Session Layer Protocols
1. Why Application Layer Protocols Matter for Cybersecurity
Law
Application layer protocols are the rules that govern how applications (like browsers, email clients, and file
transfer tools) communicate over the internet. For law students studying cybersecurity, understanding
these protocols is critical because most cybercimes happen at this layer.

Reason Explanation
Understanding Cybercrime Methods Most cybercrimes — phishing, email spoofing, website hacking — exploit application proto
Interpreting Digital Evidence Network logs and forensic reports mention protocols. A legal professional who understand
Supporting Investigations Cybersecurity experts analyze network traffic during investigations. Lawyers must understa
Determining Legal Responsibility Different protocols are linked to different cyber incidents. Understanding which protocol wa
Evaluating Security Compliance Laws require organizations to use secure protocols (HTTPS, SFTP, SSH). Legal professio

2. HTTP — Hypertext Transfer Protocol


What is HTTP?
HTTP is the foundation of data communication on the World Wide Web. It is a stateless, text-based
protocol that defines how messages are formatted and transmitted between a client (your browser) and a
server (a website's computer).

Key Properties
Property Description
Full Form Hypertext Transfer Protocol
Port Number Port 80
Type Stateless, text-based, Application Layer protocol
Working Model Request-Response (Client sends request → Server sends response)
Request Methods GET, POST, PUT, DELETE
Transfers HTML, images, videos, CSS, JavaScript, JSON, XML

How HTTP Works (Simple Steps)


• User types a website URL (e.g., [Link] in the browser.
• Browser (client) sends an HTTP GET request to the web server.
• Server processes the request and sends back an HTTP response (with HTML content).
• Browser renders and displays the webpage.

What is 'Stateless'?
Each HTTP request is completely independent. The server does NOT remember any previous request.
This is why websites use cookies and sessions — to track who you are across multiple requests (e.g.,
keeping you logged in to a website).
Shortcomings of HTTP
Advantages Disadvantages
✔ Simple and widely supported ✘ No encryption — data is sent in plain text
✔ Fast (no encryption overhead) ✘ Susceptible to MITM attacks and eavesdropping
✔ Supports all media types ✘ Stateless — needs cookies/sessions for user tracking
✔ Foundation of the web ✘ HTTP/1.1 is slower (multiple connections needed)
✘ No built-in compression

■ Exam Tip: Remember: HTTP = Port 80, No encryption. HTTPS = Port 443, Encrypted. This is a very
common exam question!
3. HTTPS — Hypertext Transfer Protocol Secure
What is HTTPS?
HTTPS is the secure version of HTTP. It adds a layer of security using SSL (Secure Sockets Layer) or TLS
(Transport Layer Security) to encrypt the data transferred between the client and the server. It ensures
communication is confidential, authenticated, and tamper-proof.

Key Properties
Property Description
Full Form Hypertext Transfer Protocol Secure
Port Number Port 443
Encryption Uses SSL/TLS to encrypt all data
Authentication Uses digital certificates to verify server identity
Data Integrity Ensures data is not modified during transit
URL Prefix https://
Browser Indicator Padlock icon in address bar

How HTTPS Works — Step by Step


• User types [Link] in the browser.
• Browser initiates a TLS Handshake with the server.
• Server presents its digital certificate (proves its identity).
• Browser and server agree on encryption keys.
• Secure connection is established — all data is now encrypted.
• Browser sends the HTTP GET request (encrypted).
• Server responds with encrypted content.
• Browser decrypts and displays the webpage.

Advantages and Limitations


Advantages Disadvantages
✔ Encrypts data — prevents attackers from reading it ✘ SSL/TLS adds computing overhead (minor today)
✔ Authentication via digital certificates ✘ Requires regular certificate renewal and management
✔ Ensures data integrity ✘ Expired/misconfigured certificates cause errors
✔ Google gives higher SEO ranking to HTTPS sites ✘ HTTPS does NOT guarantee the website is safe (phishing sites can
✔ Builds user trust (padlock icon)

■ Note: A phishing website can have HTTPS. HTTPS only means the connection is encrypted — it does
NOT mean the website is trustworthy or legitimate. This is an important legal distinction!
HTTP vs HTTPS — Quick Comparison
Feature HTTP HTTPS

Full Form Hypertext Transfer Protocol Hypertext Transfer Protocol Secure

Security Not secure; data in plain text Secure; encrypted with SSL/TLS

Port Number 80 443

Data Encryption No encryption Uses SSL/TLS

Authentication No server verification Verifies via digital certificate

URL Prefix http:// https://

Used For General browsing (non-sensitive) Banking, login, e-commerce

SEO Impact Lower ranking Higher ranking (preferred by Google)

Browser Indicator May show "Not Secure" warning Padlock icon

Performance Slightly faster (no encryption) Slightly more overhead (negligible)


4. SMTP — Simple Mail Transfer Protocol
What is SMTP?
SMTP is the protocol used to SEND emails from one server to another over the Internet. It is a text-based,
Application Layer protocol that works at the sending end of email communication. IMPORTANT: SMTP
only sends emails — it does NOT receive them. For receiving emails, POP3 or IMAP is used.

Key Properties
Property Description
Full Form Simple Mail Transfer Protocol
Protocol Type Text-based, Application Layer
Connection Type Works over TCP (Transmission Control Protocol)
Default Ports Port 25 (standard), Port 465 (secure SSL), Port 587 (secure TLS)
Direction Used for SENDING emails only
Reliability Ensures reliable delivery of outgoing emails
Mechanism Store-and-Forward — retries if recipient server is unavailable
Commands Used HELO, MAIL FROM, RCPT TO, DATA, QUIT

Where is SMTP Used?


• Sending emails from email clients (Outlook, Thunderbird) to an email server.
• Transmitting emails between email servers.
• Web applications sending notifications, OTPs, password resets, newsletters.
• Works alongside POP3 or IMAP for the complete email delivery process.

Advantages and Disadvantages


Advantages Disadvantages
✔ Widely supported by all mail systems ✘ Only for SENDING — cannot receive emails
✔ Reliable message delivery ✘ Basic SMTP is not encrypted (needs SSL/TLS)
✔ Queue mechanism — retries if server is unavailable ✘ Vulnerable to spam if not properly secured
✔ Efficient — lightweight and fast ✘ No offline email storage — purely a transfer protocol

■ Exam Tip: SMTP = Sending emails. POP3 = Downloading/receiving emails. IMAP = Accessing emails on
server. Remember: S for Send, P for Pick up (receive).
5. POP3 — Post Office Protocol Version 3
What is POP3?
POP3 is an Application Layer protocol used by email clients to RETRIEVE (receive/download) emails from
a mail server. It downloads emails to your local device and usually deletes them from the server afterward.
Think of it like going to a post office, collecting your letters, and bringing them home — they're no longer at
the post office.

Key Properties
Property Description
Full Form Post Office Protocol version 3
Protocol Type Application Layer protocol
Connection Type Works over TCP
Default Ports Port 110 (standard), Port 995 (secure with SSL)
Used For RECEIVING emails (not sending)
Working Mode Download-and-Delete model (default)
Email Storage Emails stored locally on the device after download
Offline Access Allows reading emails offline after download

Where is POP3 Used?


• Desktop email clients like Outlook, Thunderbird, or Apple Mail.
• Mobile apps where users want emails stored on their phone.
• Environments with limited server storage — emails removed from server after download.

Advantages and Disadvantages


Advantages Disadvantages
✔ Offline Access — read emails without internet after download
✘ Limited to One Device — can't sync across multiple devices
✔ Saves Server Space — emails removed from server ✘ No Cloud Backup — lost if device crashes
✔ Simple Configuration — easy to set up ✘ Poor Synchronization — read/unread status doesn't sync
✔ Faster local access once downloaded ✘ No Folder Support — unlike IMAP, no server-side folders
6. DNS — Domain Name System
What is DNS?
DNS is often called the 'phonebook of the internet.' It translates human-readable domain names (like
[Link]) into IP addresses (like [Link]) that computers use to identify each other on
the network. Without DNS, you would have to memorize IP addresses to visit websites!

Key Properties
Property Description
Full Form Domain Name System
Protocol Type Application Layer
Underlying Transport UDP (Port 53) for most queries; TCP (Port 53) for larger data
Functionality Resolves domain names to IP addresses
System Type Hierarchical and Distributed — spread globally
Caching Frequently requested names stored in cache for speed
Stateless Each DNS query is independent

Where is DNS Used?


• Every time you visit a website — your browser uses DNS to find the server's IP.
• Email services, messaging apps, and cloud platforms use DNS to connect to servers.
• Enterprise networks use DNS for internal hostname-to-IP mappings.
• CDNs (Content Delivery Networks) use DNS to route users to the nearest server.

Advantages and Disadvantages


Advantages Disadvantages
✔ Human-Friendly — use domain names instead of IP addresses
✘ Security Risks — vulnerable to DNS spoofing, DNS hijacking
✔ Scalable — hierarchical system handles billions of domains
✘ Propagation Delays — DNS updates take time to spread globally
✔ Speed via Caching — cached responses are very fast ✘ Single Point of Failure — if DNS is down, websites are inaccessible
✔ Automatic Updates — IP changes don't affect users ✘ Complex Configuration — errors can make sites inaccessible
✔ Load Balancing — routes users to different servers

■ Note: DNS Attack types important for exam: DNS Spoofing (redirecting users to fake websites), DNS
Hijacking (taking over DNS settings), DNS DDoS (flooding DNS servers to make them unavailable).
7. Telnet — TELecommunication NETwork
What is Telnet?
Telnet is an Application Layer protocol that allows a user to remotely log in to another computer and
execute commands as if they were physically present at that machine. It provides a command-line
interface (text only, no graphics) for remote access.

Key Properties
Property Description
Full Form TELecommunication NETwork
Protocol Type Application Layer
Transport Protocol Works over TCP
Default Port Port 23
Functionality Remote command-line access to computers and devices
Interface Text-only (no GUI)
Authentication Requires username and password
Connection Maintains a continuous TCP connection during the session
Encryption NONE — all data sent in plain text

Where is Telnet Used?


• Remote server management (mostly older systems or testing environments).
• Network device configuration — routers, switches, firewalls.
• Troubleshooting — checking open ports or testing mail servers.
• Educational environments — understanding client-server communication.

Advantages and Disadvantages


Advantages Disadvantages
✔ Simple and Lightweight — low bandwidth requirement ✘ NO Encryption — usernames, passwords, all data sent as plain text
✔ Remote Access — control servers from anywhere ✘ Obsolete for sensitive use — replaced by SSH (Secure Shell)
✔ Testing Tool — useful for testing network services and ✘
ports
Limited to Command Line — no graphical interface
✔ Platform Independent — works on different operating systems
✘ No File Transfer Support — unlike FTP or SCP

■ Note: Telnet has been almost completely replaced by SSH (Secure Shell) in real-world use because SSH
encrypts all communication. Telnet is dangerous on public networks!
8. FTP — File Transfer Protocol
What is FTP?
FTP is an Application Layer protocol used to transfer files between a client and a server over a TCP/IP
network. It allows users to upload, download, rename, delete, and organize files on remote servers. FTP
uses TWO separate connections — one for commands (control) and one for data (file transfer).

Key Properties
Property Description
Full Form File Transfer Protocol
Protocol Type Application Layer
Transport Protocol Uses TCP
Default Ports Port 21 (command/control), Port 20 (data transfer)
Authentication Requires username and password
Modes of Operation Active Mode and Passive Mode
Connection Type Two separate connections: one for control, one for data
Data Transfer Type Supports ASCII and binary file transfers
Encryption None by default — data sent in plain text

Where is FTP Used?


• Uploading files to web servers (e.g., website deployment).
• Backup and download of data from remote systems.
• Used by web developers, network administrators, and IT teams.
• FTP clients: FileZilla, WinSCP, Cyberduck.

Advantages and Disadvantages


Advantages Disadvantages
✔ Simple and Efficient — reliable file transfers ✘ No Encryption — credentials and data sent in plain text
✔ Batch Transfer Support — multiple files/folders at once✘ Firewall Issues — Active mode can be blocked by firewalls/NAT
✔ Resume Support — can resume interrupted transfers ✘ Not Suitable for Sensitive Data — use FTPS or SFTP instead
✔ Directory Management — browse and manage server-side
✘ Complex
folders Setup — configuring FTPS/SFTP can be complicated

■ Exam Tip: FTP = Port 21 (control) + Port 20 (data). FTPS = FTP with SSL. SFTP = SSH-based FTP
(completely different, more secure). Know the difference!
MODULE 5 — PRESENTATION & SESSION LAYER

9. Presentation Layer — OSI Layer 6


What Does the Presentation Layer Do?
The Presentation Layer (Layer 6) is responsible for preparing data so that the Application Layer can use it.
It acts as a 'translator' between the application and the network. Think of it as a language interpreter that
makes sure both sides of the communication understand each other.

Function Description Example

Data Translation Converts data from application format to a common


Converting
network format
JSON to XML

Data Encryption/Decryption Encrypts data before transmission; decrypts on receipt


SSL/TLS encryption for HTTPS

Data Formatting Handles data syntax and structure JPEG, MP3, MPEG, XML, JSON

Character Set Conversion Converts between different text encodings Unicode to ASCII conversion

Serialization Prepares complex data structures for transmissionConverting objects to byte streams
10. NDR — Network Data Representation
What is NDR?
NDR (Network Data Representation) is a protocol used in the Presentation Layer. It defines how data
structures are serialized (converted to bytes for sending) and deserialized (converted back from bytes to
data on the receiving end) for network transmission between distributed systems that may have different
data formats.

Why is NDR Needed?


Different computers may have different internal data formats. NDR solves these cross-platform issues:

• Byte Ordering: Little endian vs Big endian (how bytes are ordered in memory)
• Data Alignment: How data is arranged in memory
• Floating-point representation: Different ways numbers are stored
• Character encoding: Different text representation systems

Role of NDR in the Presentation Layer


Property Description
Data Translation Converts data into a universal format for transport between different systems
Data Serialization Structures like arrays, structs, unions are serialized into a byte stream
Data Alignment & Padding Ensures correct memory alignment on different platforms
Byte Order Handling Manages endian differences between sender and receiver
Data Integrity Ensures what was sent is accurately received and reconstructed

Where is NDR Used?


• DCE/RPC — used in Microsoft technologies like Active Directory, SMB/CIFS.
• Microsoft COM/DCOM and MS-RPC (Microsoft's implementation of DCE/RPC).
• IDL (Interface Definition Language) compilers generate NDR code.

Advantages Disadvantages
✔ Platform Independence — works across different systems
✘ Complexity — difficult to implement
✔ Standardized Serialization ✘ Overhead — adds processing and network load
✔ Supports Complex Data Types ✘ Tight Coupling with IDL
✔ Used in Robust Systems (Microsoft enterprise) ✘ Limited Adoption — mainly used in RPC ecosystems
✔ Security through well-defined data structure ✘ Debugging Difficulty
11. LPP — Lightweight Presentation Protocol
What is LPP?
LPP is a simplified presentation protocol designed for resource-constrained devices like mobile phones,
IoT sensors, and embedded systems. It is part of the OSI model's Presentation Layer (Layer 6). The word
'lightweight' means it uses fewer resources — less memory, less processing power, and less bandwidth.

Functions of LPP
Property Description
Data Formatting Converts data into a standard format for communication between systems
Data Translation Handles differences in data representation (e.g., ASCII vs. Unicode)
Data Compression Reduces the size of data to speed up transmission
Data Encryption (Optional) Ensures data is secure during transmission

Benefits of LPP in Digital Communication


• Low Resource Consumption: Works on devices with limited CPU, memory, and battery (IoT devices,
mobile phones, body cameras).
• Faster Data Transmission: Uses lightweight formatting and compression, reducing data size for
quicker transfer.
• Standardized Data Format: Ensures data from various devices is sent in a consistent format
regardless of device type.
• Supports Encryption: Can include basic encryption to protect confidential legal data during
transmission.
• Improves Interoperability: Allows different devices with different operating systems to communicate
seamlessly.

Legal and Ethical Relevance of LPP


• Cyber Law: Governs data handling and encryption during transmission.
• Digital Evidence: How data is processed and transmitted affects its admissibility.
• Data Privacy Laws: Aligns with GDPR, IT Act requirements for secure communication.

■ Note: Example: A legal document sent from a phone to a cloud service — LPP converts it to standard
format, compresses the file, optionally encrypts it, then transmits it securely.
12. Encoding in Networking
What is Encoding?
Encoding is the process of converting data into a specific format so it can be efficiently and accurately
transmitted from one device to another in a computer network. Without encoding, different devices
(phones, computers, servers) wouldn't understand each other.

Types of Encoding
Type What it Does Example
Digital Encoding Converts text or binary data into digital signals for transmission
ASCII encoding: 'A' = 65 = 01000001
Line Encoding Converts binary data (1s and 0s) into signals on a transmission
NRZ, Manchester,
medium Differential Manchester enc
Analog Encoding Converts digital data into analog signals for transmission
Used
overinphone
traditional
lines telephone
or radio networks and rad

Why is Encoding Important in Networking?


• Data Transmission: Ensures data (text, images, video) is properly formatted to travel through the
network.
• Interoperability: Helps devices with different systems understand each other.
• Security Support: Encoded data can also be encrypted, protecting privacy (important in legal data
transfer).

Legal Relevance of Encoding


Property Description
Digital Evidence Ensures evidence (emails, images, messages) is properly formatted and readable by c
Cybersecurity Encoding helps in encrypting sensitive data like legal documents
Law Enforcement CCTV, GPS trackers, body cams encode data before storing or transmitting
Data Privacy Laws Encoding supports data protection in line with IT Act, GDPR
13. Encryption
What is Encryption?
Encryption is the process of converting readable data (called plaintext) into an unreadable format (called
ciphertext) to protect it during transmission or storage. Only someone with the correct decryption key can
read the original data.

Types of Encryption
Property Description
Symmetric Encryption Same key is used to both encrypt and decrypt. Fast but less secure if the key is leaked
Asymmetric Encryption Uses a PUBLIC key to encrypt and a PRIVATE key to decrypt. More secure. Used in d

Why is Encryption Important?


• Protects confidentiality of communication.
• Prevents unauthorized access or data tampering.
• Used in emails, messaging apps, online banking, legal documents, and e-commerce.

Legal Relevance of Encryption


Property Description
Cyber Law Encryption ensures secure online communication and prevents hacking
Digital Evidence Encrypted files must be legally decrypted (with permission) for investigation
Client-Lawyer Confidentiality Legal documents sent online remain confidential through encryption
Data Protection Laws Required by IT Act, GDPR, and DPDP Bill 2023 to safeguard personal data
14. Compression
What is Compression?
Compression reduces the size of data so that it takes less time to transmit and requires less storage
space. Think of it as 'zipping' a file — you compress it before sending, and the receiver unzips it. This is
handled at the Presentation Layer of the OSI model.

Why is Compression Important?


• Speeds up file transfer — important for large legal files like scanned documents or surveillance
videos.
• Saves network bandwidth and server storage space.
• Makes digital communication more efficient, especially on slow networks.

Legal Relevance of Compression


Property Description
Filing E-Documents Large case files can be compressed for online submission to courts
Digital Evidence Storage Surveillance footage can be compressed to save space while preserving evidence
Mobile Legal Apps Compression reduces data usage and speeds up app performance
15. RPC — Remote Procedure Call
What is RPC?
RPC is a method that allows a program on ONE computer to request a service (function/procedure) from a
program on ANOTHER computer — as if it were running locally. It hides the complexity of network
communication, making a remote function call look like a local one.

■ Note: Simple Analogy: Think of calling a lawyer's office to ask a clerk to send a document. You give the
instruction, and the task is done for you — without you going there yourself. That's RPC!

Which OSI Layer Uses RPC?


RPC is implemented at the Session Layer (Layer 5) of the OSI model. The Session Layer manages and
maintains sessions (connections) between applications.

How RPC Works — Step by Step


• Client makes a request to run a function (e.g., getCourtRecords()).
• RPC system packages the request and sends it over the network.
• Server receives the request, executes the function.
• Server sends the result back to the client.
• Client receives the result as if the function ran locally.
• Behind the scenes: RPC automatically handles data encoding, transmission, decoding, and
response.

Legal and Real-World Relevance of RPC


Property Description
Digital Courts Case information systems use RPC to fetch case status from central servers
Online FIR Portals When a user files a complaint, RPC fetches jurisdictional data
E-Governance Multiple legal databases (land, tax, ID) accessed through RPC-based services
Cyber Law Enforcement RPC helps coordinate remote evidence collection and digital logging

Legal/Security Implications of RPC in Cross-Border Data Exchange


When RPC is used across countries, data travels through multiple legal jurisdictions. This creates
important legal issues:

• Data Jurisdiction & Privacy Conflict: An Indian legal firm accessing case data on a European server
via RPC may trigger GDPR obligations.
• Security Risks: Without encryption, RPC exposes data to man-in-the-middle attacks, unauthorized
access, and data interception.

Legal Takeaway — What Organizations Must Ensure


• RPC communication must be encrypted and authenticated.
• Cross-border data exchange must comply with both countries' data privacy laws.
• Proper data transfer agreements and user consent mechanisms must be in place.
16. PPTP — Point-to-Point Tunnelling Protocol
What is PPTP?
PPTP is a VPN (Virtual Private Network) protocol used to create secure tunnels between remote clients
and servers. It allows users to access a private network safely over the public internet. It encapsulates
data into 'tunnels' to protect it during transfer, providing basic encryption and authentication.

How PPTP Works


• User (e.g., a remote lawyer) connects to the company VPN using PPTP.
• PPTP creates an encrypted 'tunnel' between the user's device and the company server.
• All data sent through this tunnel is encapsulated and protected.
• The user can now access files and systems on the private company network as if they were in the
office.

Legal Relevance of PPTP


Property Description
Lawyers Working Remotely Secure access to office networks and confidential case files
E-Filing Systems Ensures safe transmission of case documents to courts
Privacy Laws Meets encryption requirements of IT Act, GDPR, etc.
Limitation PPTP is considered LESS SECURE today compared to modern VPN protocols like Op
17. SCP — Session Control Protocol
What is SCP?
SCP is a protocol used to control and manage multimedia sessions (audio/video communications) over a
network. It works alongside SDP (Session Description Protocol) to handle the initiation, modification, and
termination of sessions. It ensures sessions are synchronized and can be paused, resumed, or ended
cleanly.

Role of SCP in Online Legal Proceedings


Property Description
Session Setup Initiates the online communication session between parties (judge, lawyers, clients)
Session Maintenance Keeps the connection stable during proceedings, even with brief interruptions
Session Termination Gracefully ends the session after proceedings are over
Resynchronization Recovers and resynchronizes the session if someone gets disconnected

Legal Relevance
Property Description
Online Court Hearings Establishes stable audio/video sessions for virtual courts
Legal Recordings Supports recording, pausing, and resuming live evidence capture
Virtual Legal Education Used in live lecture streaming setups
18. SDP — Session Description Protocol
What is SDP?
SDP is a protocol used to DESCRIBE multimedia communication sessions (voice calls, video
conferencing). Important: SDP does NOT send media — it simply tells the devices HOW to set up the
session (what format to use, timing, ports, etc.). Think of SDP as the 'meeting agenda' that both sides
agree on before the actual call starts.

Example
In a Zoom or Microsoft Teams call, SDP is used behind the scenes to describe the session's format (audio
codec, video resolution, ports to use), so both sides know how to communicate before the actual call
begins.

19. Summary Table — Session Layer Protocols


Protocol Full Form Main Use Legal-Tech Relevance

PPTP Point-to-Point Tunneling Protocol


Secure remote access via VPN Private legal communication, encrypted file transfer

SDP Session Description Protocol Defines multimedia sessions (format,Online


ports, timing)
court hearings, video call configuration

SCP Session Control Protocol Manages session flow (start/pause/stop)


Live streaming for courts, legal proceedings

RPC Remote Procedure Call Calls functions on remote computers Digital courts, e-governance, remote legal databases
20. Master Quick Reference — All Protocols at a Glance
Protocol Layer Port(s) Purpose Encrypted?

HTTP Application (7) 80 Web browsing — transfers web pages No

HTTPS Application (7) 443 Secure web browsing (SSL/TLS) Yes (SSL/TLS)

SMTP Application (7) 25/465/587 Sending emails Optional (SSL/TLS)

POP3 Application (7) 110/995 Receiving/downloading emails Optional (SSL)

DNS Application (7) 53 (UDP/TCP) Domain name to IP translation No (DNSSEC optional)

Telnet Application (7) 23 Remote command-line access No (plain text)

FTP Application (7) 20/21 File transfer between client-server No (FTPS/SFTP optional)

NDR Presentation (6) N/A Data serialization/deserialization for RPC N/A

LPP Presentation (6) N/A Lightweight data formatting for IoT/mobile Optional

RPC Session (5) Various Remote function/procedure calls Optional

PPTP Session (5) 1723 VPN tunneling for secure remote access Basic (MPPE)

SDP Session (5) N/A Describes multimedia session parameters N/A

SCP Session (5) N/A Controls multimedia session lifecycle N/A

■ Exam Tip: For the exam, memorize port numbers: HTTP=80, HTTPS=443, SMTP=25, POP3=110,
DNS=53, Telnet=23, FTP=21/20. These come up very frequently!

End of Module 4-5 Study Notes

You might also like