Key Players of SSL & TLS: Client, Server, Certificate Authority (CA) - Practical TLS

[@PracticalNetworking]

📢 *Black Friday / Cyber Monday Promotion* 👉 Practical TLS for only $50 (originally $297) 💻 Use code *BFCM2024* --> pracnet.net/tls 📅 Offer expires Dec 6

[@CyberTronics]

A lot of Work goes into making these videos it is evident. Please continue these videos are golden.

[@PracticalNetworking]

Glad you're enjoying them, Hamza!

[@CyberTronics]

How you clarified that a client isn’t actually the user but is the computer is not found on any other technology video. You break down even the simplest of concepts to ensure that the most basic / newbies to IT can follow along. Even myself I benefit when you break it down to the grassroots level, as your teaching us how to be teachers! Keep up the excellent work

[@PracticalNetworking]

=)

[@alittax]

I agree, PN's videos are very well done, especially for the reason you gave!!!

[@tund3_]

One of the very best in terms of explaining network stuff in a very simple way, makes complex things easy to understand. Thanks a lot.

[@PracticalNetworking]

You're very welcome, thank you again for supporting the channel.

[@gman21xx]

It was great to see the explicit list of the top CA's. More great lessons from this channel.

[@PracticalNetworking]

Guess you already made it to the SSL playlist =). Glad to hear you're enjoying this content, Gman!

[@fastrobreetus]

Thank you for always making things easy to understand!

[@dsmith004]

Gigamon can work as the man-in-the-middle to decrypt TLS, forward traffic though the tool(s), loops back to the Gigamon where the traffic is re-encrypted..

[@mahamadoutogola4001]

so well explained ! I liked and subscribed

[@LancePorter88]

Truly appreciate you putting this out, thank you

[@madingerl]

Concise and clear, subbed 😊

[@markganus1085]

end point authentication: client: optional server: mandatory

[@merazhussain6022]

Another to the point snd great video 👏

[@PracticalNetworking]

Thank you again, Meraz =).

[@Atom-Mercury]

Thanks for this video.

[@MrDeeb00]

Thank you a lot, I was confused about how we can visit websites without certificates :)

[@Ali-q4d4c]

amazing works! Thanks

[@kento6909]

Is it OK to think entity as client and server in this context?

[@androiddoctor4897]

Hey Nice explanation man 👍

[@wwolfram33]

If the client does not authenticate to the server, does this break the non-repudiation feature discussed in the last lesson?

[@PracticalNetworking]

Only from the Client's perspective. Specifically, that the Client's traffic does not have Non Repudiation guarantees because TLS does not know who the client is.

[@kalahari8295]

SSL certificate needs to be installed in the web server i.e physical computer running a server software? Which means I can buy a SSL from anywhere and if provided by my web hosting, install it on the web hosting, which is just a Physical machine running software to respond to requests?

[@PracticalNetworking]

Yes. You can aquire a certificate form many sources and install it on any webserver that you own.

[@kalahari8295]

@@PracticalNetworking 😃 best networking teach ever! 🔥

[@IliyaDamyanov]

Interesting video.

[@klajdigjoka2157]

Isnt the certificate public and can be presented by a MITM to engage in a tls handshake. What mechanism is used in TLS to confirm that the server holds the private key

[@Nunesi]

Amazing lessons 🙌🏻🙌🏻🙌🏻Thank you so much! By the way who is the another 2% CA ? Thanks in advance

[@PracticalNetworking]

Truthfully, the slides are probably out of date at the moment. I think I recorded this in 2020. But I got the data from here if you want the most updated statistics: w3techs.com/technologies/overview/ssl_certificate

[@chaithanyakatari7896]

Awesome video

[@PracticalNetworking]

Thank you, Chaithanya!

[@karamjeetpadam4719]

Sir...do you have more widely distributed cources thru Udemy which can provide affordable cost? your course is the best in whatever i have come across to date. It has the right graphics, width and depth and perfectly explained.

[@65gtotrips]

🔰 hehe...’Smart Toaster’...I gotta check that out...❗️My family informally knows me as ‘Toast Boy’...as I always order extra toast 😃

[@PracticalNetworking]

It's funny how often "smart toaster" is used when people discuss Internet of Things. I thought it appropriate when making this video to imply that *anything* can be an SSL Client. =)

[@teaguehall17]

Makes amazing video on SSL/TLS, then proceeds to share HTTP link at 04:50 :)

[@drushkyy2017]

How can we get a promo on the course?

[@PracticalNetworking]

Promo currently running. See pinned comment.

[@drushkyy2017]

@@PracticalNetworking got it thanks

[@adryelgainza1686]

What if someone creates a certificate to act as the server? How would the client know

[@PracticalNetworking]

Absolutely! That is why we need a CA that we trust to create Certificates that we trust. We can verify the Certificate is from a legitimate CA because the Certificate is Signed by that CA. More info on Signatures: kzbin.info/www/bejne/lavcfKmGq81rZpo

[@adryelgainza1686]

@@PracticalNetworking oh I see. Thanks for the response. I’m learning for CCNA to get started on networking and move to Cybersec and went down a rabbit hole with HTTPS and SSL/TLS. Thanks a ton!

[@PracticalNetworking]

@@adryelgainza1686 You're welcome. If it piques your interest, you might want to look into the full course. I'm running a Promo through the rest of March. Link on my webpage (pracnet.net). For your CCNA, make sure you check out these two resources: kzbin.info/aero/PLIFyRwBY_4bRLmKfP1KnZA6rZbRHtxmXi www.practicalnetworking.net/index/ccna/

[@ankur9829]

always best 👍

[@PracticalNetworking]

Cheers, Ankur!

[@brandonallen7748]

in the day of IoT client providing the certificate becomes more and more common

[@PracticalNetworking]

True

[@daviddelaney363]

Interesting that the speaker fails to mention that the initiator of the TLS handshake might be an application on a server.

[@pss_crs]

Great info 👍, can please tell more about pros and cons and when to use or when not OpenSSL vs this five Certificate authorities Thanks 😊 .

[@PracticalNetworking]

OpenSSL is simply a command set you use to manage/create certificates and keys. I'm actually 90% done with a free course unpacking all the main OpenSSL commands =). Stay tuned for that! As for which CA to use... there is actually a lot more to that question than I can answer simply. From a very simplistic perspective, I'd say just use Let's Encrypt. Beyond that, I'd refer you to the full Practical TLS course where I unpack all the nuance involved.

[@mehedimazumder9378]

Thanksss

[@PracticalNetworking]

You're welcome =)

[@admin_e]

👍👍👍

[@PracticalNetworking]

👍

[@EliMansimov]

4:21