Let's go HTTPS
summary
Explains how HTTPS actually works: keypair + CSR → CA-signed certificate (single-name, wildcard, SAN), chain-of-trust and one-year validity, TLS handshake mixing asymmetric (key exchange) and symmetric (session) ciphers, and common misconfigurations. Shows deployment steps and validators to use: run certificate on web servers or PaaS, test with SSL Labs, fix mixed content and set cookies Secure flag, enable HSTS header and consider public key pinning, and automate issuance with Let's Encrypt or Caddy.
AI-written summary · about
chapters (18)
- 0:00Start
- 6:16Secure Connection
- 10:49Authentication
- 20:20X.509 SSL Certificate
- 21:25Certificate Types
- 22:11Symmetric vs Asymmetric encryption
- 25:25Handshake
- 27:15Cryptographic primitives
- 27:40self signed vs trusted
- 28:43Chain of trust
- 31:24Create a Certificate
- 34:47Example config
- 36:03Caddy server
- 37:30Cookie security
- 38:15Mixed Content security error
- 39:03HSTS Header
- 39:42Public Key Pinning
- 40:15Let's Encrypt
