SSL/TLS for Mortals
summary
Timeline shows SSL is dead and TLS 1.3 is current; prefer TLS 1.2+ and avoid SSLv2/3. Live demos use a packet sniffer to compare plaintext HTTP with HTTPS, and tools shown are curl -v -k, OpenSSL s_client, nmap --script ssl-enum-ciphers, Java keytool and Portecle for keystores. Surprising facts: about 169 root CAs ship in OS runtimes and DigiNotar led to 247 certificates being revoked — a single CA compromise breaks widespread trust.
AI-written summary · about
chapters (11)
- 0:00Introduction and welcome
- 1:51Why TLS matters today
- 4:19History of SSL/TLS
- 7:45Public private key encryption
- 19:34TLS handshake explained
- 23:27How certificates work
- 30:33Trust and certificate authorities
- 37:06Case study DigiNotar breach
- 43:36Extended validation certificates
- 46:35Tools and troubleshooting
- 50:55Q&A and closing
related talks
50mSSL/TLS for Mortals
44mSSL/TLS for Mortals
53m25 Years of SSL - Secure(ish) Sockets Layer
27mDebugging TLS/SSL
01h 00m25 Years of SSL - Secure(ish) Sockets Layer
39mSSL/TLS For Mere Mortals
58m25 Years of SSL - Secure(ish) Sockets Layer
01h 01mHTTPS & TLS in 2016: Security practices from the front lines