Explore the critical role of certificates in securing internet communications, from credit card transactions to private messaging, in this 25-minute talk. Learn about certificate fundamentals, key actors involved, validation processes, and the impact of GDPR. Delve into topics such as constructed emails, website changes, DNS modifications, CCL sets, and the Heartbleed vulnerability. Examine trust issues, semantics, and the Superfish incident while gaining insights into the importance of verifying recipient identity for enhanced online security.
Overview
Syllabus
Intro
What is a certificate
Certificate actors
Validation
GDPR
Constructed Emails
Web Site Change
DNS Change
CCL Sets
Heartbleed
TrustACo
Semantics
Superfish
Conclusion
Sources
Taught by
White Hat Cal Poly