Dive deep into the world of Transport Layer Security (TLS) with this comprehensive 8-hour video series. Explore TLS 1.2 and 1.3, including detailed explanations of handshakes, key exchanges, and extensions. Learn about HTTP Strict Transport Security (HSTS), perfect forward secrecy, and SSL/TLS termination. Understand the concepts of on-demand TLS, Diffie-Hellman vulnerabilities, and Server Name Indication (SNI). Discover the importance of SSL/TLS certificates, certificate pinning, and the transition to shorter certificate validity periods. Examine the differences between symmetrical and asymmetrical encryption, and explore emerging technologies like homomorphic encryption. Gain practical knowledge on enabling TLS/SSL on PostgreSQL with Docker, using Traefik, and implementing TLS passthrough. Stay informed about global TLS developments, including attempts to block TLS 1.3 and ESNI in China and Russia. Delve into HTTPS and HTTP/3 negotiations, SSH connection routing, and troubleshooting techniques using cURL verbose mode. Master the intricacies of TLS handshakes, including the new Encrypted Client Hello (ECH) extension, and explore TLS and HTTPS options in Microsoft IIS.
Everything Related to Transport Layer Security - TLS
Overview
Syllabus
Transport Layer Security, TLS 1.2 and 1.3 (Explained by Example).
Transport Layer Security 1.3 Explained - TLS Handshake, Key Exchange, TLS Extensions and MITM.
HTTP Strict Transport Security (HSTS) and TLS Stripping Explained.
Perfect Forward Secrecy in TLS Explained.
SSL/TLS Termination, TLS Forward Proxy Pros and Cons.
What is On Demand TLS?.
How Diffie Hellman can be Man In the Middled in TLS 1.3.
TLS 1.3 Handshake Explained In Details (with Math).
How HTTPS Work?.
SNI Limitation and Invention of ESNI.
What is SSL Stripping?.
Firefox deprecates support for TLS 1.0 and 1.1 ( THIS IS GREAT! BUT .... ).
Server Name Indication (SNI) TLS Extension Explained.
What are SSL/TLS Certificates? Why do we Need them? and How do they Work?.
Google Chrome and Firefox to Join Apple’s Safari in One Year Certificate Validity (My opinion).
TLS/SSL Certificate Pinning Explained.
TLS 1.1 is Dead … Well Almost! thanks to Chrome 84 - (Deep Dive Analysis).
Symmetrical vs asymmetrical Encryption Pros and Cons by Example.
How Homomorphic Encryption will revolutionize Software Engineering (Encrypted Database Search).
Enabling TLS/SSL on PostgreSQL with Docker.
WOW! China Blocks TLS 1.3 with ESNI - Let us discuss.
Traefik Crash Course (Without docker).
TLS Passthrough Explained.
Russia Follows in China’s footsteps and attempts to block TLS 1.3, ESNI, DoH & DoT, let us discuss.
HTTPS and HTTP/3 negotiations are now Faster thanks to Cloudflare, RIP HSTS, Let us Discuss.
SSH into Backend Servers without Publicly Exposing Them - SSH Connection Routing with HAProxy.
The TLS Handshake Explained with Example (the Math).
cURL Verbose Mode Explained (and how I use it to Troubleshoot my Backend).
Making TLS Handshake more Secure - The New Encrypted Client Hello TLS Extension (ECH).
TLS and HTTPS Options in Microsoft IIS.
Taught by
Hussein Nasser
