Just trust me - public key infrastructure in less than twelve minutes
summary
Quick primer that explains how public/private keys and RSA factorization enable encryption and signing, how a x509 certificate bundles a public key with validity dates and a signer, and how browsers trust a top-level CA from a local trust store. Covers packaging key+cert as PKCS12 or Java keystores, why the web server must present the full certificate chain, and how revocation works with CRLs versus live checks via OCSP.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 2:10Why do we need cryptography
- 4:57Asymmetric encryption
- 10:33Infrastructure
- 13:00Questions
related talks
42mLet's go HTTPS
16mPKI problem: who we actually trust
36mYou Like It Or Not; You Need It! - PKI And Certificate Management
26mNo way, JOSE!
56mIoT: Taking PKI Where No PKI Has Gone Before
33mDemystify Modern Signing: Keys, Certs, and Envelopes
01h 00mCS Fundamentals: Why SSL and SSH are Secure
46mFrom substitutions to public keys - an introduction to cryptography