A Deep Dive Into Advanced TLS
summary
Advanced TLS is now stable in Java (Java 1.66 stable) and released as a 1.0 package in Go (Go advancedtls 1.0 released). The libraries add dynamic certificate identity/root reloading via file-watcher and scheduled refresh providers, a callback-based post‑handshake verification mode that skips hostname checks but exposes the full chain, and built‑in CRL checks in Go (crypto/tls lacks revocation). C++ API is in progress, and HSMs are supported by implementing the provided identity/trust provider interfaces.
AI-written summary · about
chapters (8)
- 0:00Advanced TLS in JPC
- 2:29Java TLS features
- 7:54Go TLS package benefits
- 15:43C/C++ TLS progress
- 17:11Q&A: Certificate rotation
- 21:01Q&A: CRL validation & HSM
- 24:58Q&A: TLS performance
- 26:45Q&A: Multi-user auth
related talks
37mTransport Layer Security (TLS) v1.3 support in Java
39mEvolving the Security of the Java Platform
56mSSL/TLS for Mortals
44mSSL/TLS for Mortals
45mFrom Java 17 to 21: A Showcase of JDK Security Enhancements
37mKeeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
52mSecurity Control Enhancements
01h 01mHTTPS & TLS in 2016: Security practices from the front lines