Skip to main content

Posts

Showing posts from July, 2017

Web Security - HTTPS, SSL, TLS and Certificates

Web Security - HTTPS, SSL, TLS and Certificates https://www.instantssl.com/ssl-certificate-products/https.html Why is it needed? Man-In-the-Middle attacks (someone reading the information you send and receive and may even change the message). How is it implemented? SSL or TLS. SSL This is the secure protocol i.e. a bunch of rules that creators of browsers like Chrome and IE follow. Replaced by TLS. Certificates are used to hold the information need for the Browsers to implement the SSL.   HTTPS https://www.howtogeek.com/howto/33949/htg-explains-what-is-encryption-and-how-does-it-work/ http://robertheaton.com/2014/03/27/how-does-https-actually-work/ A secure/encrypted version of HTTP, combination of HTTP and SSL or TLS. Verifies that you are talking directly to the server that you think you are talking to. Ensures that only the server can read what you send it and only you can read what it sends back. Anyone can intercept every single o...