The first few milliseconds of HTTPS
summary
Explains the first 200ms of a TLS 1.2 handshake using Wireshark captures: client hello lists ~18 cipher suites and SNI, server hello picks one, server sends an X.509 chain (notes 181 root CAs in Mozilla store), then RSA or ECDHE key exchange produces a premaster/master secret split into six keys (two directional tunnels). Demonstrates decrypting captures with the ssl key log file, mentions SSL Labs, the cipherlist site, OpenSSL speed and a PHP TLS decoder, and TLS 1.3’s reduced round trips.
AI-written summary · about
chapters (40)
- 0:00Introduction
- 0:17Who is using HTTPS
- 1:03What is TLS
- 1:28History
- 4:59Statistics
- 6:21Heartbeat
- 7:01RCS
- 8:21Wireshark
- 8:33Client
- 8:46HTTP sniffing
- 11:02Encryption
- 13:19RSA
- 14:38Cipher suites
- 15:21Configure ciphers
- 16:01SSL Test
- 16:45SSL Extensions
- 17:38Supported browsers
- 18:08Client hello
- 21:24SSL certificates
- 22:43What are SSL certificates
- 23:36Intermediate CA
- 25:01Implied Trust
- 25:16Root Certificate Authorities
- 25:31Mozilla Security Store
- 26:13Authentication
- 27:13Cipher Suite
- 27:31DiffieHellman
- 29:51Generating secrets
- 31:45PHP
- 32:12Key Exchange
- 33:36Client Key Exchange
- 33:49Tunnel
- 34:08Application Data
- 34:32SSL Key Log
- 36:38TLS overhead
- 37:58Attacks in TLS
- 38:18TLS 133
- 38:30Round trips
- 39:40What should I do
- 39:57How does the server decide
