SSL/TLS for Mortals
summary
Explains why TLS matters, shows a live curl + Wireshark demo that contrasts plaintext HTTP with encrypted TLS, and walks through RSA with small primes to show how public/private keys derive shared secrets. Covers version advice (avoid SSLv3/TLS1.0/1.1, prefer TLS1.2 or TLS1.3), describes a CA compromise that forces revocation and led Chromium to blacklist 247 certificates, and lists practical tools: openssl s_client, Nmap ssl-enum-ciphers, JVM keystore/truststore flags and Djavax.net.debug for troubleshooting.
AI-written summary · about
chapters (19)
- 0:00Introduction
- 2:05OSI Model
- 2:57Brief History
- 5:48Demo
- 8:15Public Private Key Encryption
- 11:20RSA
- 13:39RSA without PQ
- 18:57Demonstration
- 20:32Certificates
- 24:15Signatures
- 25:05Verifying
- 25:15Certificate Authorities
- 26:49Who is John
- 27:45Key Ceremony
- 29:41Fairy Tale
- 31:49What happens now
- 32:32What happened after
- 35:23Live Demo
- 38:20Tips Tricks
