Anti-Replay and Non-Repudiation - Practical TLS

Anti-Replay and Non-Repudiation are two terms that often come up (along with Confidentiality, Integrity, and Authentication) when discussing Secure Communication. In this lesson we will illustrate these two concepts.
This lesson is a free lesson from my new course: Practical TLS. This course is a deep dive into SSL and TLS. This SSL Training course is all you need to to fully understand SSL and TLS.
🔐 More details about the course:
classes.pracne...
🏢 Do you configure or troubleshoot TLS/SSL for work? If so, I'm willing to bet your employer would happily pay for this SSL training. Reach out if you'd like to coordinate an introduction for a bulk license purchase with your company. I'm happy to provide a generous referral bonus =)
💬 Join Practical Networking Discord
/ discord
🖧 Want to learn how how data moves through a network?
• Networking Fundamentals
Since you've made it to the bottom of the Description, here's a $100 off coupon code you can use on the full course =)
YT100

[@PracticalNetworking]

👉 *More free lessons* kzbin.info/aero/PLIFyRwBY_4bTwRX__Zn4-letrtpSj1mzY ✨ *Full course* pracnet.net/tls 💲 *Coupon Code* for 50% off: youtube50

[@RohitLonkar-kc1xy]

You're the best KZbin channel for understanding the networking concept brother your are the best thanks for this ❤

[@PracticalNetworking]

Thank you for the kind words =)

[@rayspecale1212]

Studying for Network+. This channel is basically an Ivy League School! Thanks for the free knowledge

[@PracticalNetworking]

Glad this is helping you, Ray. Good luck w/ your Net+ =) You might also enjoy the Networking Fundamentals series: kzbin.info/aero/PLIFyRwBY_4bRLmKfP1KnZA6rZbRHtxmXi That said... if you are willing... Could you do me a favor? Do you mind sharing this video on Linked In, Reddit, Twitter, Facebook, or any other social media you use? As an independent creator, that would be an _enormous_ help, and I would appreciate it _greatly_ .

[@Mrsoftball35506]

Ty for your time and expertise on this subject. Clear, precise and accurate

[@redsayian]

Great explanation! this helped me understand both terms. Thanks!

[@renujain8911]

Really enjoying the videos & contents.... good part is to keep viewer engage with interesting & simple explanation to understand the problems in hand when send anything over the wire... Every developer should understand these concept as it is equally important as build any application.... 🙂

[@squabknob]

you are a saint for these videos thank you

[@shakar.bajalan]

short and sweet. great explanation

[@CyberTronics]

You = Teacher material

[@PracticalNetworking]

Thank you again, Hamza =)

[@chaithanyakatari7896]

One of the best video

[@PracticalNetworking]

Thank you again, Chaithanya =)

[@wwolfram33]

Great lesson!

[@PracticalNetworking]

Thanks, Ward.

[@alittax]

Thank you for your work!

[@PracticalNetworking]

You're welcome again, Alitta =)

[@simeneidal5203]

Great video! But I have a question: To my understanding, non-repudiation ensures that neither party can deny participance in parts of, or all of the communication. But how does this prove that the specified destination of the message actually recieved the datagram?

[@PracticalNetworking]

If the message was never received, there would be no claim that a message was sent. i.e., for someone to accuse a sender of sending a message, the message _has_ to have arrived on the other side.

[@simeneidal5203]

@@PracticalNetworking I see, thank you for answering my question. Loving your videos!

[@PracticalNetworking]

@@simeneidal5203 Glad you've enjoyed them, Simen. As always, sharing the content really goes a long way and helps me out. If you're willing, please consider it =).

[@Atom-Mercury]

Thanks for this video.

[@haoming3430]

QUESTION about non-repudiation: Only the server is server (e.g. web server) is authenticated in the process of TLS, not the client (e.g. browser). So I think non-repudiation only applies to the server but not the client. Is it right?

[@IliyaDamyanov]

Super interesting.

[@almond339]

Integrity does not prevent the modification of the data, it is a property that notifies when the data is modified

[@Mohamed-Maghrebi]

Thanks a lot for the great job sir, Please i have an important question, it is about the anti-replay scenario, well TLS provide authentication and integrity, so i guess that the bank HQ will know that the red person is sending forged messages (i.e. he has not the real authentication), please i want to know how is he able to send these duplicate of the second packet. I appreciate your amazing work and the time to read my comment.

[@PracticalNetworking]

With SSL/TLS, after the packets are encrypted they are passed from one ISP to another until they get to their destination. There is nothing stopping someone from working at the ISP to simply copy the packets on the wire and send them along a second or third time. More details on how encrypted packets are sent across the Internet here: kzbin.info/www/bejne/fn7Sd6mIgJl7i9E

[@Mohamed-Maghrebi]

@@PracticalNetworking Thanks a lot sir, i appreciate your amazing work, you made it clear for me now

[@PracticalNetworking]

@@Mohamed-Maghrebi You're very welcome. If you enjoyed this video and/or the rest of the series, consider sharing it with a friend or community online. =) No worries either way though, cheers Mohamed!

[@Mohamed-Maghrebi]

Yes of course 🙌🏻

[@PracticalNetworking]

@@Mohamed-Maghrebi Thank you for your support. =)

[@mads7790]

TLS does not provide non-repudiation! Because the authentication is only on the connection itself and not on every single message. This is done by sharing a symmetric key, which enables both sides to encrypt and sign messages. Doing this does not break anything because as long as one side does not lie to itself, it will know what messages are sent by the other.

[@admin_e]

👍👍👍

[@PracticalNetworking]

👍

[@yaminiprasad-c3u]

why are you not making videos frequently..they are good..

[@virender24]

Thanks for this great video :)

[@PracticalNetworking]

You're welcome, Virender =). Glad you enjoyed it!

[@lallu1122]

amazing