The document outlines the differences between SSL/TLS and IPsec regarding authentication and encryption order, types of authentication, and implementation locations. It also describes a man-in-the-middle attack on the Diffie-Hellman exchange used in SSL/TLS, illustrating the roles of both parties involved. Finally, the document notes methods to prevent such attacks.

1. Question 4: Explain the key differences between SSL/TLS and IPSec with regards to the order of
authentication and encryption, the type of authentication, access control and where its
implemented.
Question 5: Describe the man-in-the-middle attack against the Diffie-Hellman Exchange
protocol, which is used by SSL/TLS, based on the two parties (A)lice and (B)ob. Next, explain
how this attack can be prevented.