SSL/TLS For Mere Mortals
summary
Plain explanation of how TLS actually secures web traffic including the asymmetric handshake that negotiates keys then switches to faster symmetric encryption, why TLS 1.3 is recommended, and why revocation checks are optional so browsers may not recheck certificates immediately. Covers automated issuance by Let’s Encrypt which moves industry from multi‑year certs to monthly rotation, contrasts domain vs extended validation, and explains the Russian root CA case where major browsers simply do not trust that root so sites show warnings.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 3:47Why SSL/TLS matters
- 9:08HTTP to HTTPS history
- 12:25SSL vs TLS differences
- 15:40TLS handshake step-by-step
- 21:21Certificate authorities and chains
- 26:45Certificate validation levels
- 30:19Russian CA myths debunked
- 34:21SSL/TLS risks and limits
- 35:27Q&A on mTLS and handshakes
