SSL Certificates: Serving secure web content over HTTPS

[@jhilkeDai69]

letsencrypt.org provides free SSL Certificates, enjoy!!!

[@webconcepts]

Thanks! They hadn't launched yet when I originally published this video. People should definitely use them if possible.

[@GlaceGFX]

I use PorkBun and they recently added support for letsencrypt. However, I couldn't get it to work as it required me to add some .pem certificates to my server and configure it using the apache 2 configuration file.

[@whackahost8422]

I know the browsers are so annoying with it now. Ya gotta get that SSL and lets encrypt makes it so easy!

[@ianmacdonald6350]

Which expire every few weeks, so keeping your sites up becomes a plate-spinning exercise.

[@kumaranil181]

WebConcepts thank you for your videos, they are great. We see that you are not creating any more content, moved to some other channel ?

[@wylee80]

One of the best clear & concise explanation of utilising TLS/SSL in HTTPS. Please do a video on OAuth 1 & 2 as well!

[@colemantoons]

For years I've been struggling to get decent traffic for my website and I never knew all this about SSL certificates. I am so pissed at my web hosting service for never explaining this and I appreciate very much this video which explained it quite well. Thanks.

[@InternetGuy8745]

Great explanation. Straight to the point in a clear and concise manner without rambling.

[@charlievanhorn]

Finally, someone has been able to explain it in a way that makes sense with an example.

[@barfgameplay]

Great video, thank you very much! I've never worked with SSL certificates before, but since i had to make a webshop for a client, i wanted to learn a bit more about. Most 'tutorials' and instructional video's were really difficult to understand, or too simple and not in-depth enough, but your video was crystal clear and in-depth enough for me to know what i'm getting in to. Thanks ;).

[@danithegirl7865]

you are my favorite IT youtuber

[@marc-andrenoel4065]

Dude, you rock. This is by far the best certificate explanation.

[@jorgebanos421]

Please come back. Your videos are very good and well explained.

[@gkhfbnhfvng]

Man, you're a treasure. Just exactly the type and format of content i looked for.

[@Pataxe99]

One of the clearest explanations of this I have seen. I finally understand this now! Thanks!

[@snt0309]

took me forever to find a good video on this subject. thanks. what a relief.

[@sanjeevprasadkotapati5783]

explained in a plain language that can be understood by anyone......kudos

[@brauliovasquez5221]

man you re awesome, i think i haved watched all of your videos tonight, great job

[@bobsmithy3103]

How do you explain so well? Is there some kinda of framework you use to explain which makes everything so easy to understand?

[@liptongtr]

Great video man, amazing you fitting so much substantive data in a comprehensive 9 min video.

[@m14monroe]

you are terrific at explaining technical details of IT concepts. I've enjoyed watching some of your videos. Learned a lot. Thanks!

[@AlekVila]

You do a great job of explaining complex topics!

[@YogaandLivingwithChai]

I like your videos, they're short and combines theory and lil bit of programming too! :)

[@eaueespies]

That was the best video I watched about SSL Certificates! :)

[@jeteloriaga]

thanks so much, you have the most complete and practical info on the topic that i'd found in youtube!

[@samkelly9821]

Great work. Very nice explanation not too basic not too complex. Just the right piece of info.

[@cevaaltcineva5767]

SHA-2 and SHA256 are not encryption protocols. They are a set of cryptographic hash functions. SHA stands for Secure Hash Algorithm. Despite this i think you gave a great explanation and are giving in general (with your other videos). Keep up the good work.

[@AmberishRaj]

Very nice explanation. Could you explain Heartbleed bug related to ssh in one of your future videos.

[@DanielVerberne]

Surprisingly useful, thank you sir.

[@Andrei-ds8qv]

Just 1 question, at 6:57 you said that with private you encriyps, and with private you decripts,actually you can use private key to both encrypt and decrypt, and the public key can be used both to encrypt and decrypt, right?

[@TheGryphon14]

quite catchy outro song!

[@NathanSubramani]

Who issues the proposed private key from the client side? Is it the browser that does this/site/connection basis? The shared private key that gets encrypted by public key of the server.

[@timbroders7473]

Dude you're explanations are the best, you should get more views. Perhaps write some bots to generate leads for your channel

[@itsmanjutube]

SHA1 and SHA2 are Data Integrity protocols not Encryption protocols.

[@Trinaldi01]

A very good explanation! Good job

[@smruti2008]

Awesome ! Please help to know more about SSL certificates ..plz share more docs if you have ..

[@WorkSchoolEnglish]

You don't need a SSL certificate with Bluehost. Although they try to sell you one for $1 per month, even though they provide a free one (they make it REALLY hard to find the free one on the dashboard)

[@jjkbozo]

Thanks Ricky Gervais!

[@crispinkalala6076]

This is an incredibly great explanation. Thanks so much!

[@rezonite]

@ WebConcepts Is there an updated video of this one ? 2018 one.

[@sicfxmusic]

Thank you AJ Styles

[@loki112000]

What stops a dodgy operation from buying SSL certs to obtain information? Or is this simply to encrypt during transfer?

[@junkim565]

Wonderful job and very informative. Also great resource articles :) Thanks.

[@sudipnath8093]

awesome video and great animation.

[@coolstorybro6154]

Hi I was wondering if you could help me with some questions: Having obtained a personal Certificate from Certificate Authority (CAert WoT) to send encrypted mails, with my email, certificate fingerprints , key info, and checksums (with SHA1 and MD5 algorithms), my questions are: 1)Is it possible for a dedicated attacker with unlimited resources to circumvent these protection mechanism? 2)If it is possible, why is this mechanism still in place? 3)Propose a way of distributing the root certificate that does not suffer the problems you’ve pointed out. Thanks in advance!

[@leonsponzoni]

1) Yes, or it is better to say: the Attacker does not Circumvent, it bruteforces in. 2) Remember when you said Unlimited resources? The bruteforce attack takes more than a hundred lifespan for SHA2. It is not that it is impossible, but complexity is prohibitive (What would you spend more than 100 years worth of processing? ). There is a known exploit to MD5 hashing algorithm since 2008, which means you should avoid it. (Basically, look for news of exploits and update to the next one). 3) Those are the fun parts of it, it depends on you trusting the whole "way". Would a physical copy of the certificate in some read only media enough? Would receiving the number via a chairman? Most firefox users trust that their firefox CA list was not tampered with, windows users believe that microsoft checks them thoroughly (ultimately believing in MS as their first root). My University for example uses non certificated certificates, which you can check by phone if you need it.

[@team2g733]

Thanks so much. To the point and articulate

[@sushilkhot8065]

you described very well...Thank you

[@johnnymas2013]

Thanks for the info. Made things a bit more clear.

[@leonhookens663]

Just what I was looking for. Thanks

[@lxnny2357]

what if your browser is compromised?

[@taoli2635]

Excellent explanation. Thanks!

[@ruru31402]

Really awesome explanation. Thanks

[@vanessanaylon]

Very good! 7:00-8:15 is the best!!

[@wealthcreator5740]

encrypted response from server can be read by any one cause key to decrypt response is public ?

[@bhanusahu9723]

Great explanation of SSL stuff ..

[@ameyapatil1139]

Awesome video ! loved it

[@kperry5000]

Great explanation. You really should be getting more views!

[@uhulpires]

Awesome video.

[@brunalidia3224]

J

[@uhulpires]

K

[@abhinavmishra9401]

another great video ! keep it up my frnd

[@soeradjchotkan4199]

is it rsa they're using ?

[@BenediktBayer]

Thanks! Very good explanation

[@HardDriver3950]

Really great video. Subscribed.

[@LESLEYYY0]

Wait what, how does the web browser decrypt the encrypted data by the webserver? It doesn't have a private key?

[@pranjalsingi9966]

Web browser decrypts with server's public key. Whats encrypted with public key can only be decrypted by private key and vice-versa.

[@gaojun3887]

Great video, very informative!

[@raazeev1]

Great compact explanation..

[@staceymatthews833]

Thanks for sharing this informative video to here. Good Job. I got 90 days free ssl certificate for my website from Comodo.

[@staceymatthews833]

If any body want free ssl - Get 90 Days free SSL Certificate goo.gl/gORKQ7

[@downanninn9789]

Thanks for making this, very helpful. Could you kindly help me? I have done everything under the sun (clean wiped computer 4 times) and all certificates except for duckduckgo are showing a blue question mark and sometimes issuer statement will be greyed out. Computer is perfect if I leave my house. No help from ISP. The "virus"?? inserts itself before I get to the login page. Anything I download like anti-virus etc. happen instantaneously. Almost as if I'm running a fake internet, can't explain it better, sorry. Any help would be greatly appreciated. Thank you.

[@stefanschannel2577]

spannung pur, thanks for sharing.

[@h0m3_]

If only we knew what happened to cloud flare back in 2014 :/

[@gregxcarter]

Thank you, this video is extremely informative.

[@MehulKumar_m3huL]

Awesome video!

[@gagangupta1255]

Great explanation.

[@rajeshantony74]

I loved it

[@msk9414]

can someone tell me who, when and where the shared key was generated ?

[@Peter-pr3fl]

+Mohammed Saleem Khatib The shared key is generated at the client side and then sent to the server encrypted by his public key. After this process both entities know the shared secret and will start using this method: symmetric encryption

[@jayquan17ify]

Your audio is so low

[@maheshvshet]

Nice Explanation. Thanks

[@zes3813]

wrg, ts not connect or not. people people connex

[@aneurysmjs]

yeah, you really explain very well yo!

[@samprajnata9329]

Nice video. Thank you!

[@databaseexpert]

Excellent. Thanks!

[@RiccardoBello98]

7:02 italy for the win

[@rainergaming648]

Riccardo Bello that Mexico

[@mounishreddy7609]

great explanation

[@ami7620]

Great tutorial!!

[@mrsandeepprabhukumar]

you are the best ...!!

[@asifbilla4924]

Nice video, Thanks for sharing

[@PatPerron]

Great Post!

[@PatPerron]

Patrick Perron Hi guys, can I suggest you this? clicname.com where you can get at very low cost an SSL certificat. Great post man!

[@splendidfoxtail1790]

Superb thank you for this.

[@noaimi781]

I use DigiCert it's awesome

[@yechaowang5410]

awesome!

[@martonberecz3917]

Brill! Thanks!

[@aravind.a]

Good Stuff !!

[@adamtimus745]

Awesome!

[@nigelhughes862]

Awesome Thank you!

[@mahaltech]

Hello Sir I want to know how can I use free certificate in iis and access that url through global ip address From Mobile app is any way to do that and iam from country That not listed when I want to careate certificate request all what I want is https url that I can access it from mobile app I work on it But I want that for free if any one can help pleeeeeeeeeeeeeease

[@pauloteixeira6677]

amazing vid

[@user-mishasmp]

thanks man!

[@Pranav_046]

Thank you

[@yatharthgurudev294]

very nice sweet viedo thanks for making very good viedo very nice thanks for maing i

[@ElPitr]

Thank You :-)

[@alitikaaf]

low volume

[@AngeloSurfxD]

Nice!

[@TheKajtaj]

great!

[@akhilbisht11]

Thanks

[@kingsley15]

I'm guessing this video was made before free SSL became widely available? Anyone reading (especially cPanel users), I have a recent tutorial on my channel.