Hansel and Gretel do TLS
summary
Explains concrete wins and exact steps: TLS 1.3 reduces handshake from 3 RTTs to 2 (≈33% latency cut) and enables zero‑RTT for idempotent GETs; it removes weak ciphers, mandates perfect forward secrecy and elliptic‑curve key exchange. Recommends tools and practices: OpenSSL/LibreSSL/BoringSSL, OCSP stapling, HSTS preload, and testing with SSL Labs; and automation: Let’s Encrypt with Certbot or acme.sh for 90‑day certs. Gives numbers and anecdotes (2048‑bit minimum, Ericsson 10‑year cert outage took Vodafone offline ~half a day) and clear server config actions.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:00What is TLS
- 4:25Why use TLS
- 6:06Hashes
- 13:50TLS 133
- 18:58How does it work
- 25:04Creating a certificate
- 26:45The CAS
- 30:19OCSP
- 32:51Validation
- 37:19Wildcards
- 43:19TLS Configuration
- 44:26Other Security Tips
- 46:41RFC
- 47:23Testing
- 48:57Speed analysis
related talks
01h 01mHTTPS & TLS in 2016: Security practices from the front lines
19mWhat's happening in TLS (transport layer security)?
37mHTTPS Is Better than Ever Before. Now Its Your Turn.
59mProactively defending your business
44mSSL/TLS for Mortals
51mEverything you learned about SSL is deprecated
39mSSL/TLS For Mere Mortals
53m25 Years of SSL - Secure(ish) Sockets Layer