25 Years of SSL - Secure(ish) Sockets Layer
summary
Timeline from 1994 to today traces concrete breakages and fixes: SSLv1 fails in initial demo, SSLv2 is broken in months, SSLv3 survives until POODLE (2014/2015), TLS 1.0 is essentially a renamed 3.1 in 1999, TLS 1.1 sees almost no uptake, while TLS 1.2 adoption via performance (session resumption) rockets usage; TLS 1.3 appears in 2018 with faster handshakes. Data sources (Google transparency, Mozilla, crawler.ninja, top‑1M scans) show rapid HTTPS growth but a worrying plateau. Browsers remove green padlocks and add red “not secure” warnings; LetsEncrypt and Comodo enable both legit and phishing sites; Kazakhstan attempts TLS interception via forced root certs.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:42Green authenticated
- 6:22History of SSL
- 27:40Why do they care
- 30:26Advertising Standards Agency
- 33:40What does a padlock mean
- 36:00Browser warnings
- 37:46Testing
- 41:43Privacy
- 45:56QA
- 51:12HTTP vs HTTPS
related talks
01h 00m25 Years of SSL - Secure(ish) Sockets Layer
58m25 Years of SSL - Secure(ish) Sockets Layer
56mSSL/TLS for Mortals
01h 01mHTTPS & TLS in 2016: Security practices from the front lines
50mSSL/TLS for Mortals
44mSSL/TLS for Mortals
51mEverything you learned about SSL is deprecated
19mWhat's happening in TLS (transport layer security)?