Standards

• SSL v2 — Netscape spec
• SSL v3 — Netscape spec
• TLS v1 — RFC 2246
• SSH 1&2 — IETF drafts

Papers/Intros

• Introduction to Public-Key Cryptography
• Introduction to SSL
• OpenSSL Certificate Cookbook

Command-Line Tools

• ssh — popular way to do secure remote logins. Can also wrap a TCP port, often used for things like cvs and rsync.
• stunnel — a port-wrapper that speaks the lower-level SSL protocol, with more limited authentication options
• openssl — some basic tools to generate certificates, test servers, test clients, etc...
• keytool — key/cert management provided with java

Libraries

• OpenSSL, formerly SSLeay
• Sun's JSSE, included in J2SDK v1.4.2+ (reference)

SSL vs SSH

• SSL is more widely deployed (eg. every web browser, possibly encouraging shared libraries be available to other applications)

Arenas

• protocols designed to be secure from the beginning (ssh, https)
• wrappers for unsecure protocols (rsync, cvs, ...)
• secure/obscured wrappers around entire network stacks
  • VPNs (both SSH and SSL)
  • corporate firewall piercing

Negative

• "SSH - are you nuts!?!" or "Does Bruce Schneier lie?" (details)
• The end of SSL and SSH?, -Kurt Seifried (and Richard Silverman's response)