HTTPS, SSL, TLS & Certificate Authority Explained

Поделиться
HTML-код
  • Опубликовано: 21 дек 2024

Комментарии • 279

  • @freecodecamp
    @freecodecamp Год назад +200

    I love your teaching style. Do you have interest in sharing one of your already made courses with our channel?

    • @laithacademy
      @laithacademy  Год назад +29

      Responded on LinkedIn

    • @judevector
      @judevector Год назад +12

      That will be amazing we will gladly watch it ,what an amazing combo

    • @disrael2101
      @disrael2101 11 месяцев назад +3

      @@laithacademy Hahahaah am I reading it right, fcc asks laith to post on their channel wow.. 😅 I think only you and Craig Dennis (my two favorite teachers, what a coincidence) had such a honor to be asked directly by fcc themselves to host on their channel..

    • @disrael2101
      @disrael2101 11 месяцев назад +2

      @@laithacademyby the way laith I think you're the right guy to ask this question as it seems you've lots of experience in different fields according to your videos on this RUclips channel.. So an intermediate front end developer freelancer I'm pondering whether i should apply as front end intern or move to learn devops cloud infrastructure and then trying to get an intern job in that field, or maybe go all the way to LLM, machine learning, ai and build a few projects in that field and apply as intern there.. I've interests and curiosity in all the 3 topics I just can't decide which path should I take further haha
      ... So maybe you can suggest me as a mentor your valuable opinion regarding all that? Thanks again and keep sharing all those awesome valuable videos

    • @comosaycomosah
      @comosaycomosah 10 месяцев назад

      would 100% listen to this guy on freecodecamp he does an awesome job

  • @o0GzxS41BIbyux3vEoNehl5FH
    @o0GzxS41BIbyux3vEoNehl5FH 9 месяцев назад +79

    Nice video, but you could have also mentioned that the certificate is very tied to the website's domain name. You could also have said that the CA company checks the credibility of the certificate applicant and whether the domain name has been purchased by the applicant.
    And a technical detail - CA does not encrypt the applicant's public key with its private key. It only digitally signs the certificate.
    To digitally sign a document/file - we do not encrypt the entire file or its part with our private key. Because a 1GB file after encryption will give us a 1GB encrypted file. Therefore, we create a hash of this file, which is much smaller. Then we encrypt this hash with a private key and add the encrypted hash (digital signature) to the file. In this case, the document is the applicant's certificate.
    It should be mentioned that if at least one bit of the file/document changes, its hash will also change - this is how hashing algorithms work. So, it is impossible to replace the website's domain name in the certificate without changing the hash and, consequently, the digital signature. If something in the certificate changes, the CA must sign a new one again.
    And this is very important, because the browser first of all checks whether the website's domain name entered in the address field is identical to what is included in the certificate sent by that website. Because of that it is sure, that it enters the correct site. But the certificate could be fake. So, in second step it checks the certificate as well.
    Browser creates a hash from the certificate, uses the CA's public key to decrypt the hash/signature, and compares these hashes. If they are the same, the certificate is OK. This proves that the certificate has not been changed along the way and comes from the owner of the domain/website.
    And only when the domain name of the website is the same as in the certificate and the certificate is verified positively, only then does the browser trust the website it wants to visit - and a padlock appears.
    Greets.

    • @falconx7560
      @falconx7560 4 месяца назад

      Why do we encrypt the hashes in the first place if the public key is also available so an attacker can also easily decrypt the hash? Even the attacker won't be able to alert the certificate, but why do we go through encryption?

    • @o0GzxS41BIbyux3vEoNehl5FH
      @o0GzxS41BIbyux3vEoNehl5FH 4 месяца назад

      @@falconx7560 To check if the certificate of a given site was signed by a trusted CA.
      At first, you cannot trust the site you are visiting, that it is the site you want to visit. You need someone third party, whom you trust, who will confirm that this site is the site. Someone who will issue a certificate to this site. This third party is the CA (certificate authority), a kind of 'notary' for electronic certificates, whom we trust (or rather browsers and operating systems).
      The CA encrypts the hash of the applicant certificate with its private key and adds it to the certificate as a digital signature. And only with the public key of this CA, can this hash be correctly decrypted. If you try to decrypt with a different key - the hash will always be different, incorrect, never will match to the certificate hash calculated during checking. So if you decrypted the correct hash, using the correct public key, you know that it was encrypted with the private key of this CA. Only this CA holds its private key, no one else has it. This is what gives us the certainty that the site's certificate was signed by a trusted, legal, exactly this one CA. What gives us the certainty that the site's certificate is definitely assigned to this domain, to this site you are visiting - the CA ensures this.
      So from now on you can trust the website you are visiting and you can start exchanging SSL keys to encrypt the communication between you and the website.

    • @o0GzxS41BIbyux3vEoNehl5FH
      @o0GzxS41BIbyux3vEoNehl5FH 4 месяца назад

      ​@@falconx7560 To verify that a site's certificate has been signed by a trusted CA.
      To begin with, you can't trust the site you are accessing that this is the site you want to visit.
      You need a third party you trust to certify that this site is that site. Someone who will issue a certificate to that site. That third party is the CA (certificate authority), a sort of 'notary' for electronic certificates that we trust (and more so browsers and operating systems).
      The CA encrypts the applicant's certificate digest with its private key and adds it to the certificate as a digital signature. And only with this CA's public key can this digest be decrypted correctly.
      If you try to decrypt with another key - the digest will always be different, incorrect, it will never match the certificate digest calculated during the check. So if you have decrypted a corrected hash, using the correct public key, you know that it was encrypted with the private key of that CA. Only that CA holds its private key, no one else does. This gives us confidence that the site certificate was signed by a trusted, legitimate, exactly that one CA. Which gives us confidence that the site certificate is definitely assigned to that domain, to that site you are visiting - the CA provides.
      So from now on, you just trust the site you're visiting, and you can start exchanging SSL keys to encrypt the communication between you and the site.

    • @azurarobo
      @azurarobo 3 месяца назад

      ​@@falconx7560​being able to decrypt is not the point. It's not about confidentiality but rather it's about authenticity.
      If a man in the middle changes the content of the file, he can also calculate a new hash with the same algorithm and replace the hash. So now if you calculate the hash, it matches. But the file is altered.
      Now let's suppose the hash is encrypted using the private key. A man in the middle changes the content of the file. He calculates a new hash. But now he needs to encrypt the new hash with the private key which he doesn't have. Now you can decrypt the hash using the public key and compare it with the calculated hash and verify that the data isn't modified

    • @JakartaMax
      @JakartaMax Месяц назад

      -> Make a better video.

  • @AleksandrZhuravlev-tu3to
    @AleksandrZhuravlev-tu3to 9 месяцев назад +16

    Great video! Last and most important thing that you didn’t notice in your video. Root CA Verification. The browser has a pre-installed list of trusted root CA certificates, which it uses to verify the authenticity of the root CA certificate presented by the website. The browser checks whether the root CA certificate presented by the website is signed by a root CA that the browser trusts.

  • @Lordpeyre
    @Lordpeyre 9 месяцев назад +13

    Fantastic! I could never wrap my head around how you get a mutual key established over the Internet without someone being able to snoop it, and this finally made the connection for me. Plus certificates make more sense now.

  • @AkeelMoh
    @AkeelMoh 11 месяцев назад +7

    Only video in the RUclips where you can come with pretty much zero or very basic knowledge of networking, internet security and still be able to understand SSL/TLS certificate better and very clearly than an average CS students know of..! Simply amazing teaching skills! 👌♥️

  • @YoutTubeHandle
    @YoutTubeHandle 11 месяцев назад +6

    Rarely I comment on videos, usually, I stick to liking or disliking to provide feedback. However, I couldn't resist commenting on this video-such an incredible way to explain the intricacies behind how things work!

  • @captainsamy8576
    @captainsamy8576 9 месяцев назад +12

    This is BY FAR the most educational video I've ever seen on this topic. Thanks a lot! It made a huge difference that you really started at the bottom instead of building on knowledge of other (confusing) stuff.

  • @0xSW1337
    @0xSW1337 7 месяцев назад +25

    This is absolutely an amazing video. There is one small thing that may be missed by viewers and that is why we are using asymetric encryption to encrypt a symetric key. Why not just use asymetric encryption the whole time? Why do we need to validate a symetric key? The reason is because asymetric encryption/decryption is a computationally expensive operation compared to symetric encryption/decryption. The majority of the data transfer happens with symetric encryption with a key which both the client and sever agree upon, all this crazy asymetric infrastructure is there in order to verify the symetric key was not tampered with.
    Thanks for this video!

  • @tripham8864
    @tripham8864 11 месяцев назад +4

    Accidentally clicked on this video, but after nearly an hour of watching, what I got was satisfaction. You're doing a great job! Thanks!

  • @dougthefiddler
    @dougthefiddler 10 месяцев назад +6

    I've been searching for a detailed description of how the certificate chain of trust works. This is the best I've come across, by far! Thanks for posting!

  • @catbroke1797
    @catbroke1797 2 месяца назад +2

    5:05 honestly? with how complicated and insanely fast it is, the fact that we fed lightning to a rock and taught it to think for us as well as communicate through invisible wavelengths to other rocks? basically magic tbh

  • @seharas3943
    @seharas3943 10 месяцев назад +2

    As a cyber security student this video was very informative. It flowed very smoothly and didn't feel bored at all (even though it was 40mins). Very good video. thank you laith academy.

  • @Bobbel888
    @Bobbel888 2 месяца назад +1

    27:26 The server-side exchange with the authority is not a subprocess of the connect handshake, but a one-time prologue for getting the signed certificate, where the domain name is an essential entry of the certificate.

  • @esantix
    @esantix 9 месяцев назад +2

    It is great you went all levels in OSI model. Sometimes staying at the abstractions of higher layers can confuse or make learners assume wrong ideas! Great video

  • @scottspa74
    @scottspa74 3 месяца назад +1

    This is an EXCELLENT video on this. I have an Associates degree in cybersecurity & digital forensics (and one in network admin), and still couldn't wrap my mind around this. I also have purchased a 200$ course in cryptography (and it's an excellent course with visuals and labs that I haven't completed cuz it's about 40hrs long). This gets to the basics in about 40min. Love it. One thing I'm still trying to understand is how the shared secret keys are derived and exchanged after verification of authority of the server certificate.

  • @Zee-p2j
    @Zee-p2j 19 дней назад

    Don't have words to express my appreciation, you have done a fantastic job and answered all my questions that I have had for years. God bless you, my friend ♥

  • @arkatgdaplays8381
    @arkatgdaplays8381 9 месяцев назад +2

    The video starts from basics that's what makes it easy to understand and relate. So far one of the best videos on this topic. Amazing stuff. Thank you for putting this together.

  • @BillyLongshot
    @BillyLongshot 7 месяцев назад +3

    first time I went beyond simply exposing myself to jargon and understood the logic. That's 2 and a half pages of notes, including a drawing of my own. Tops best spent time this week, even though earlier I launched my first ever website with its own API. Thank you

  • @alltechtrickstips4850
    @alltechtrickstips4850 6 месяцев назад +4

    So far best explanation I've seen! Explained like a I'm five years old

  • @AnsisPlepis
    @AnsisPlepis 23 дня назад

    The best explanation on this topic I’ve seen so far. Thank you!

  • @SunilKumar-z1x4j
    @SunilKumar-z1x4j 8 месяцев назад +3

    By far this is the best video i have seen on CA. Everybody explain these concepts in a peripheral way and we will end up more confused. Here you have done a great job. Thank you!

    • @jay_wright_thats_right
      @jay_wright_thats_right 7 месяцев назад

      No they don't, you're just not a technical person.

    • @szilardfineascovasa6144
      @szilardfineascovasa6144 6 месяцев назад

      @@jay_wright_thats_rightOr he is a technical person, with exposure to other parts of the vast thing that is the IT world.
      You could program compilers your entire life and not need to understand these concepts.

  • @krystdranrevjurolan1766
    @krystdranrevjurolan1766 3 месяца назад +1

    This is probably the BEST tutorial i have ever watched

  • @garzonjav
    @garzonjav 10 месяцев назад +1

    After watching the video, I just could not help asking myself who is making this video. The quality, the details, the PowerPoint slides, the detailed explanation left me wanting more content in this manner. You have a skill. Another thing that I might add. One can say that your video is long (took me three seating to complete it) but the knowledge that I came out was unbelievable. I understood the topic 100 percent. Don’t see how you could have made it shorter. Amazing job. Can wait for new content and I am looking at other videos and topics that you have done as the content has to be amazing.

  • @geoffcoles
    @geoffcoles Месяц назад

    This is the best video I have ever viewed on this topic. What a brilliant explanation. Thank you for putting this material together.

  • @naveenkumarmurugan1962
    @naveenkumarmurugan1962 7 месяцев назад +3

    Never seen such a great tutor... you made this very simple.. live long and happy! Deserves 10000000000000$

  • @egidfertal8240
    @egidfertal8240 6 месяцев назад

    Well I really love your teaching style :)
    When go slow and to the detail you actually saved my time ;) one of the best learning videos on youtube.

  • @g-strivers
    @g-strivers 10 месяцев назад +1

    Bro, your lectures are way above college level. I mean, I learn here way more by watching your explanatory video than actually going to college. Thanks for taking the time to be as considerate enough in sharing all of this valuable info. I agree, also with some of the comments down here, you're easy to follow and man I've learned so much in that 43 minute explanation. You should create your own courses and sell them online just saying, given your potential. Anyhow, wishing all of the best.

  • @kalyanbhadra3202
    @kalyanbhadra3202 10 месяцев назад

    Thank you for making this video. This is exactly what I was looking for after wasting time watching 3 or 5 minutes videos on this topic. Now I understand it. Love your teaching style.

  • @AshrafZaman
    @AshrafZaman 9 месяцев назад +2

    The best explanation on the topic. Kudos for the remarkable effort you have put in! ❤

  • @kim92se64
    @kim92se64 Год назад

    at 22:32 minutes I fully understand how secure communication happened at the first place !!! Awesome work as you do always Love from Pakistan

  • @jackdesparrow4783
    @jackdesparrow4783 10 месяцев назад

    Crazy explanation ❤❤❤ in an hour I am attending client round I am 200% confident right now

  • @deepikakumar8369
    @deepikakumar8369 3 месяца назад +1

    Awesome video. The best one I ever saw till date

  • @NK-iw6rq
    @NK-iw6rq 3 месяца назад

    One of the best explanations and breakdowns I have seen. Fantastic video, thank you Mr.Laith Academy.
    This video a must for anyone studying or working in Cybersecurity.

  • @khaled.hashed
    @khaled.hashed 5 месяцев назад +1

    I Understand encryption better now this is a good video explaining asymmetric and symmetric encryption

  • @Asithappend
    @Asithappend 6 месяцев назад +3

    The one of the best video I have ever seen on RUclips Thank you so much for making it very clear❤❤❤ Best wishes

  • @j03150315
    @j03150315 Месяц назад

    THANK YOU SO MUCH!!!!!!! This is the best explanation I found on TSL!!! Thank you!!!!!

  • @realLeuchtturm
    @realLeuchtturm 9 месяцев назад +1

    Very good explanation. I am myself a programmer and didn’t really get a clear picture of https into my head. Thank you very much!

  • @heniyentertainment
    @heniyentertainment Год назад +1

    instructor like u deserve better bro i have been watching you videos for long time they are so good even you are better than most famous youtuber. you know you are the best instructor also most underrated instructor you deserve better.

  • @estebangomez1823
    @estebangomez1823 5 месяцев назад

    One of the best, concise and most completed videos i have seen, its a brain refresh

  • @_kbizzle89
    @_kbizzle89 2 месяца назад

    Beautifully explained, i had no idea about certificates, and this video has moved me further in some understanding! Thank you

  • @josecarlosmoralopez9693
    @josecarlosmoralopez9693 7 месяцев назад

    I have an exam tomorrow, and I skip security lessons. This video is a lifesaver! Thanks you!

  • @Gold_Stone
    @Gold_Stone 4 месяца назад

    when i first clicked this video, does it really need 40 minutes to explain this concept? HOWEVER, this is the video that really helps you understand this concept. Thank you for a great video!

  • @vitchakornpoonyakanok
    @vitchakornpoonyakanok 4 месяца назад +1

    Best explanation I’ve seen.

  • @TrungRichie
    @TrungRichie 4 месяца назад

    Bro, you explained the thing that I spent too much time too understand in about 50 minutes. Thanks

  • @Me_Jawad
    @Me_Jawad 4 месяца назад +1

    Great video about ssl I ever seen on internet 👍

  • @anjaz
    @anjaz 9 месяцев назад

    a very well explained tutorial.... was searching all internet for something like this and got stuck with your vedio and YOU NAILED IT ....... Thanks for such an explanatory video !!!

  • @knpragash
    @knpragash 5 месяцев назад

    Too good ! For years I couldn't figure out how Public/Private keys work..until this video

  • @thedancingtheory
    @thedancingtheory 3 месяца назад +1

    Amazing knowledge and super content. Great Job!!

  • @rakshithasudhakar4282
    @rakshithasudhakar4282 11 месяцев назад +1

    super, excellent, very good explanation. very good teacher

  • @mtroyap
    @mtroyap 17 дней назад

    Great content, very helpful video. Thank you so much.

  • @amanchoudhary9107
    @amanchoudhary9107 9 месяцев назад

    Thanks for detailed explanation ,Best ever explanation i have come across FOR SSL HTTP AND HTTPS❤

  • @Ian-bb7vv
    @Ian-bb7vv 4 месяца назад

    extremely clear explanation. easy to follow even without much previous experience

  • @shukebeta1030
    @shukebeta1030 8 месяцев назад

    great video, worth the time watching. but one thing to add to the video is that asymmetric encryption is used only during the "symmetric encryption public key' exchange period, after that, symmetric encryption will be used. the reason is symmetric encryption is far more efficient.

  • @sakarienuh6293
    @sakarienuh6293 4 месяца назад

    incredible, amazing, so easy to understand. some people have that talent of explaining stuff so good.

  • @joehayden6065
    @joehayden6065 2 месяца назад

    Sick video mate. Really well explained, great depth! Pedagogical dream 😊

  • @al_t6643
    @al_t6643 3 месяца назад

    Very nice explanation, not just useful, but also well detailed and visualised
    Thank you for your efforts

  • @bouraouimohamedrached1944
    @bouraouimohamedrached1944 Месяц назад

    Great explanation Laith thanks a lot for sharing your efforts !!!

  • @ismailhamdach2672
    @ismailhamdach2672 5 месяцев назад

    Very clear, Detailed enough to understand. Thank you for the quality of teaching

  • @hrishabhcodez
    @hrishabhcodez 9 месяцев назад

    The best explanation I have come across on this topic! 🙌

  • @ifomsban4998
    @ifomsban4998 4 месяца назад

    Thanks for the great explanation of a complex process...I finally have a better understanding of the whole process!

  • @LinDa-vx3ly
    @LinDa-vx3ly 6 месяцев назад

    I’m only about 10 minutes in, but I can already say I really like how you explain things 😀

  • @Vinneetv7
    @Vinneetv7 11 месяцев назад

    Best video on SSL certificate on any platform.. thank you so much!! You just earned a subscriber :)

  • @odaytarek3528
    @odaytarek3528 10 месяцев назад

    you are one of the best teachers out there i really appreciate you and your work.

  • @qrrrrrp
    @qrrrrrp 3 месяца назад

    Thanks so much; this is the best explanation I have found 👍

  • @taylorz7875
    @taylorz7875 3 месяца назад

    You are such an amazing teacher!!

  • @charlesenglish2720
    @charlesenglish2720 3 месяца назад

    Thank you so much for taking the time to explain this.

  • @kamalharsha-ry2nu
    @kamalharsha-ry2nu 6 месяцев назад

    one of the best ones ever, excellent explanation.Thanks

  • @entreprenewbie
    @entreprenewbie 4 месяца назад

    You just earned yourself a gold star ⭐️ for the day !

  • @abhinavkumar8683
    @abhinavkumar8683 9 месяцев назад

    One of the best and detailed video video ,so amazing explanation ❤

  • @Amin-hy8nv
    @Amin-hy8nv 7 месяцев назад

    AMAZING video really this has to be the best explaniation on that topic i have ever seen

  • @jorisebbelaar
    @jorisebbelaar 4 месяца назад

    It's finally starting to make some sense, thanks for explaining!

  • @soccerplaya102289
    @soccerplaya102289 6 месяцев назад

    I love your video and your explanation especially when you are explaining certain nuances about this process. Awesome vid/explanation I'll look forward to more of these kinds of vids.

  • @htetlynnhtun101
    @htetlynnhtun101 27 дней назад

    Keep up the good work, sir. Thank you so much.

  • @ibmraj7329
    @ibmraj7329 6 месяцев назад

    I love your teaching style and you are explained everything consicely. thank you so much... LAITH

  • @Sukam_1611
    @Sukam_1611 11 месяцев назад +1

    Very well explained.. Appreciate your good work. 👏👏

  • @zhaiyaotnt
    @zhaiyaotnt 9 месяцев назад

    best video out there that explains all this. thank you for your efforts!

  • @hefshinesaqlainisaqmulla4000
    @hefshinesaqlainisaqmulla4000 10 месяцев назад

    Finally... I understood this concept thanks to you...

  • @chimbu4822
    @chimbu4822 3 месяца назад

    Very clear, explained very well.

  • @sminukoshyishere
    @sminukoshyishere 5 месяцев назад

    Really wonderful video. simple to understand and a detailed explanation helped me a lot.

  • @manojpetshali3240
    @manojpetshali3240 5 месяцев назад

    very nice and simple explanation for a critical concept. Thanks a lot

  • @ibsachemeda2862
    @ibsachemeda2862 9 месяцев назад

    Great video ans love your presentationand teaching method, keep it up

  • @raynbol
    @raynbol 5 месяцев назад

    I loved your video, it explained me a lot and always made me think of how it works while you were explaining. ❤

  • @BaryaleyKhan
    @BaryaleyKhan 5 месяцев назад

    bro just summed up my whole sem

  • @nirmalunagar
    @nirmalunagar 10 месяцев назад

    This is the best explanation of Cryptography concept, Thank you so much for making this.

  • @johnragica1723
    @johnragica1723 8 месяцев назад

    Thanks a lot for making this video. Helped me understand clearly how the complex process of encryption works

  • @Curious_Skeptic083
    @Curious_Skeptic083 4 месяца назад

    This was amazing! Thank you for the great work

  • @pattaravutmaleehuan9001
    @pattaravutmaleehuan9001 5 месяцев назад

    Thanks for your effort in making this video. It is easy to understand and I really like it.

  • @kim92se64
    @kim92se64 Год назад

    completed !!! to be honest never seen such a wonderful explanation on such complex topic
    Regard: Kim from Pakistan

  • @fabiendidonato7939
    @fabiendidonato7939 8 месяцев назад

    Thanks for your pedagogy, I really appreciated your video.

  • @rushikeshdeshmukh2034
    @rushikeshdeshmukh2034 8 месяцев назад

    Superb video on https. Thanks for the elaborate, clear explanation.

  • @Testing-wt3ob
    @Testing-wt3ob 7 месяцев назад

    You made my Every Topics very clear. Thankyou so much

  • @Andrew-7324
    @Andrew-7324 11 месяцев назад

    Amazing video, thank you for such labor to make it for people who doesn't really know all this stuff

  • @signapi1973
    @signapi1973 6 месяцев назад

    Best explained video! Thank you very much.

  • @asifreza23
    @asifreza23 5 месяцев назад

    I love your contents sooooooooooooooo much! I love your teaching style. Please make more tutorials!

  • @devak1318
    @devak1318 9 месяцев назад

    Thanks a lot Laith Academy... great stuff and very well explanation.

  • @samsay87700
    @samsay87700 4 месяца назад

    I truly enjoyed the video because of the ability of the trainer the explain things so well. Kudos to the Laith Academy & the trainer

  • @alenarudykh4459
    @alenarudykh4459 3 месяца назад

    Thank you for your video, it really helped me to understand how communication works

  • @HasinthaWeragala
    @HasinthaWeragala 5 месяцев назад

    meticulously detailed and well explained most noble sire.

  • @karuppasamypandian5226
    @karuppasamypandian5226 2 месяца назад

    Wonderful you did a amazing job

  • @szymaniuk1983
    @szymaniuk1983 2 месяца назад

    sheeeet bro. That was a great video. Keep up the good work