Why digital certificate?

Digital Signature:
• What is digital signat...
Digital signature is used for authentication, non-repudiation and data integrity, but there is one weakness of digital signature alone: man-in-the-middle attack.
Digital certificates are electronic credentials issued by a trusted third party. A digital certificate not only verifies the identity of the owner, but also verifies that the owner owns the public key.
In this video, I will demonstrate why digital signature has weakness and how digital certificate comes in place to make sure digitally signed document must come originally from the claimed sender.
Advanced Cryptography:
• What is digital signat...
Playlist: Basic Cryptography
• Private Key Encryption...
Please leave comments, questions and
please subscribe!
Sunny Classroom

[@brunomartel4639]

dude this stuff is more addictive than netflix

[@sunnyclassroom24]

You make me laugh. Thank you very much!

[@azadjohari]

totally!

[@juliohdez5327]

agree

[@RomanPeralta]

What a great material. I’m amazed by the elegance of simple explanations for complex topics. Solid gold.

[@sunnyclassroom24]

Much appreciated!

[@yjwoo1131]

This is for sure the best introduce-level cyber security series i've ever watched! thank you soooo much for the clear examples and animation, these videos saved hours for me

[@mikespilligan1490]

Sunny is the best person i have ever heard at explaining things. I present IT concepts at work in to non technical people. I take Sunnys videos and copy them word for word, he is amazing.

[@janezperme9770]

Easy to follow, clear and to the point. If one needs more, there are RFCs. Keep up the good work and thumbs up for all your videos Sunny !

[@rachelleebueza7888]

True! This is also the best video I've watched concerning digital signatures and certificates. After watching this, I've already understood everything related to this topic! Thank you so much sir!

[@EmanuelAB98]

What a quality explanation!. Those very nice animations help a lot to understand the thing. Thanks for these amazing videos. Cheers!

[@suvekshyashrestha9388]

Thank you for clarifying. You make the best tech videos that simplify even the complicated and confusing concepts.

[@shaheerkhan2896]

Thank you Sunny! i am doing security+ and following your channel for quite a bit now. Your videos are so amazing and simple. I have been so confused about these topics, i watched so many videos and they complicate things so much. Watching your videos on the topic really helped me to understand this topic and now i can even understand the more complex version of explanations in my course and book. Keep doing what you are doing:)

[@sunnyclassroom24]

Best of luck!Thank you for watching!

[@chrissullins4653]

Thanks Sunny - you helped me pass Security +, now I'm on to CEH. Love these videos!

[@sunnyclassroom24]

I am so happy for you and Security+ is not easy to pass. Congratulations!

[@donbrahms]

After look at many of your tutorials and I conclude that you have give lesson to many people with great explanations. Salute, success for you Sunny 👍

[@AkashDeepSingh-ic5ub]

You make complex-sounding things so easy by concepts and analogies you bring in.

[@Chris-ss8zt]

Wow, you've got such an ability to explain things in the easiest way. Thanks so much for that.

[@PhannaPH30]

Your explanation is still valuable to me in 2023. Clear and easy to understand! Thank you for your kind sharing!

[@harpatcametsi512]

Sunny, you do an amazing job! You are clear, simple to understand, perfect teacher!!! Thank You!

[@sunnyclassroom24]

Thank you for your compliments! I appreciate.

[@joy4u2k6]

The BEST explanation of this complex subject, using the best choice of words. Awesome!!!

[@advokat_vrn]

Sunny, you are the best! Thank our for your videos

[@sunnyclassroom24]

Many thanks for your words.

[@syedzoheb7497]

Hi Sunny 🖐️ Started watching your videos since yesterday. Your explanation and examples are very clear. Thank you so much.

[@sunnyclassroom24]

Thanks and welcome!

[@kristophskidoo324]

I love how slow you go and the visuals! very easy to follow.

[@sunnyclassroom24]

Thanks.

[@benlee3545]

Hi Sunny, your video is so warming and it is a leisure to watch your videos. You indeed have the caliber to be the most caring teacher in the world. Everyday is a sunny day by watching your video. Not only informative, it is a real pleasure to watch your video. Thanks a lot.

[@sunrice7423]

Thank you very much for this video and the digital signature video. It helps me a lot to know the back-end theory. The speed and how you present it also helps a lot.

[@sunnyclassroom24]

Glad it was helpful!

[@helloworld7313]

Sunny, why are you so good at explaining these stuff. Please make more videos on networking

[@NabikiT85]

Thanks for the videos. I really appreciate that you put what you're saying , helps me a lot

[@sunnyclassroom24]

You are welcome and I am glad it helped.

[@subashreee1655]

simple yet clarity on your videos amazed me

[@overyourbed666]

HEY MAN, YOUR CONTENT IS AMAZING. KEEP UP THE GOOD WORK!!!

[@sushantbandhekar2157]

Thank you sir, Your explanation is very simplified. It basically gave a good overview of the concept.

[@101appsCoZa]

another great video! thanks for making certificates easy to understand.

[@jainavagarwal8698]

Thank you so much. The way you explain is the best. Example based learning is always fruitful.

[@bhakaiyalakshmi3829]

I was preparing for a seminar... About this topic .. It was so helpful to me . Thank you so much... Seeing frst time ur vids... But it is understandable 🙏🙏🙏🙏

[@niningning]

Always the best video in cyber security. Thanks, Sunny

[@sunnyclassroom24]

Thank you for watching!

[@tamilstudent1]

I am a newbie to networking and this is the only video i found easy to understand the digital certificate

[@sunnyclassroom24]

Thanks!

[@potato5169]

Sir , you explained difficult things in a very simple way. Thankyou 😊😊

[@ftmwknk]

ich habe in meinem Leben nicht so viele Erzählern gesehen wie Sie. Thank you very much from Austria...

[@amizan8653]

These are solid videos, thanks for uploading them!

[@ipiadillionson999]

Very nice, sunny classroom! Your videos helped me a lot. Keep up with good work!

[@sunnyclassroom24]

Thanks. I am glad it is helpful.

[@RobBastien]

Thanks Sunny, very informative and well presented.

[@mayureshmandal1423]

Amazing stuff. This video and the one on digital signature. It's like stumbling onto a gold mine.

[@jackthehammer2245]

Thank you for your video! Appreciate your time and effort! You saved me hours.

[@sunnyclassroom24]

You are welcome! I try my best to save learning time so that everyone is happy :)

[@RobertStineIsTheBest]

God bless you my man. Now I will pass my programming exam. Godspeed!

[@sunnyclassroom24]

Good luck!

[@dharmeshkumar5167]

You are really a great teacher. YOU made us understand in better way

[@sunnyclassroom24]

Thank you very much!

[@sarathpavithra]

I am every day watching your videos, thank you so much for your effort and clear explanations. 🙏👍👌

[@abhijeetraj7952]

I like that intro music so much btw 😊. Well thanks for so clear explanation ♥

[@sunnyclassroom24]

Thanks a lot for your kind words.

[@verotinaleasletante4949]

Finally understood. Many thanks, Sunny Classroom.

[@sunnyclassroom24]

you are welcome!

[@iamkrishn]

A great video again. Thanks Sunny!

[@amosgakwerere266]

Sunny you are simply amazing , i got to your video to day but for sure it is like miracle from God, I was preparing my exam but this is absolutely stunning

[@sunnyclassroom24]

Wonderful!

[@marianasabeva6156]

Thank you Sunny! Your videos are very helpful!

[@sunnyclassroom24]

My pleasure!

[@ajayiopeyemi6624]

Sunny thanks, I enjoy your videos, well explanatory

[@RomanyKarius]

Very professional videos, keep on as you save hours for us

[@kalyanirajalingham1286]

Wonderful video! Very nicely explained!

[@svalyavasvalyava9867]

thank you for this great explanation!

[@AD34534]

You're the best teacher!

[@imrancisco1]

Great video and very simple way of explanation

[@khadka504]

Thanks mate :: simple language and well explained ..Thanks

[@chunpoyang1302]

Sunny, you are the man.

[@rajatsinghbhandari9549]

Thank you so much! This was very helpful 🤠

[@UniversalVibe.]

Best explanation in simple language

[@musa94]

thanks sunny, you made it clear!

[@1994LIOR]

thank you so much for posting these videos, they help a lot!!!!!!!!!!!

[@sunnyclassroom24]

You are welcome! Thank you for your time! Check out my other videos please!

[@bongafoukeze491]

Thanks for the video, well explicit

[@atharvabet1637]

I love you sunny, what great content!!

[@najiba.4486]

love what you do !!! thank you so much :)

[@swarajgupta3087]

Absolutely fantastic

[@myhobbies1288]

Greatly simplified.. Even a layman can understand it very easily.. Sir as you explained PRIVATE KEY is used for DIGITAL SIGNATURE . My question is what is the use of PUBLIC KEY?

[@kattopeter7280]

we use the Public Key to decrypt, that make authentication and non-repudiation

[@ligimurlaub857]

Hi Sunny, thank you for hard work and your videos. Only one hint is, that lists 11 and 12 are the same. Greetings from Germany, Pfiley.

[@sunnyclassroom24]

Thank you for noticing that.

[@SriRam-yq4id]

Excellent explanation Sir.

[@reccartoon]

now that was the explanation i want thank you sunny✨✨😊

[@sunnyclassroom24]

You are welcome!

[@muruganandamm6685]

you're great sir. Thanks for your videos

[@loganhuang3704]

Thanks very informative and clear!

[@sunnyclassroom24]

you are welcome, Guangzhe!

[@susanjohnson8337]

you are a great teacher!

[@sunnyclassroom24]

Many thanks.

[@barzanahmed7194]

I love your videos, sir!

[@user-DongJ]

Great video. I've a question: Isn't every public unique? If so, why Alice can't tell the difference between Bob’s public key & hacker’s public key? If not, is there a way to do it without a 3rd party?

[@g3mint446]

Great explanation!

[@raza2641]

Excellent explanation.

[@ronenbanerjee5194]

Hi Sunny. Great video. But what is to stop hacker from intercepting public key with digital certificate and using this public key to de-crypt (and read) the message? Thanks

[@golammuktadir4355]

Thank you very much

[@melaniemendozajara]

Hey Sunny, thank you very much for your well explained videos !! I am really greatful. I saw this video, the one of digital signature and the asymmetric and symmetric key encryptions. I would like to ask you in terms of security objectives: confidentiality, integrity, availability, authenticity and accountability. If I have to relate those objectives to the symmetric and assymmetric key encryptions... Which security objectives achieve the symmetric key encryption and which ones achieve the assymmetric one? What I think according to your videos is that symmetric key encryption ensures confidentiality due to their private key however doesn't ensure authenticy due that they have only one same key which can be intercepted by a hacker and assymmetric key encryption ensures authentication and integrity through the digital certificate. Am I correct? what can you add to that? And one last question is: has the message authentication code (MAC) similar logical to what you explained to the digital certificate? thank you very much in advance :) Greetings from Belgium

[@sunnyclassroom24]

First of all, thanks for your great questions. Encryption can be very complicated. To keep it simple, asymmetric key encryption and symmetric key encryption would work together to make sure authenticity and confidentiality. I have videos about "how SSL works" to demonstrate how they work together. for example, you (your browser) wants to talk to a web server and all conversation should be encrypted (that is why we need https: and padlock). first, your browser wants to verify that the server is the server you wants, and your server will use asymmetric key to send you "digital certificate". Once your browser has verified the server, then it will send its private key (symmetric key encryption) to the server encrypted by the server's public key, and then only the server can decode the browser's private key with its own private key. It might be confusing at this point. Once the server get your browser's private key, then all conversation would be encrypted. I have also one video " Kerberos", which only use symmetric key algorithm. In summary, asymmetric key encryption is normally used to verify each other and exchange the secret key (private key of symmetric key) so that they can encrypt their conversation. I hope my answer would be helpful. Please do not hesitate to ask me any questions.

[@OdpalajAchmed]

Keep it up! You are great.

[@sunnyclassroom24]

Many thanks for your encouragement!

[@rishimitranath]

Very Well explained

[@erikb454]

best explanation!

[@mayurnagdev5545]

very well explained sir... thanx

[@sunnyclassroom24]

You are welcome!

[@balajispn]

Dear Sunny, can you please explain how 2 way SSL works where client and server each have to show their certificates. Do we have to take the client certificate and install it in the server keystore and vice-versa. It would be great if you can clarify this with a video or point me to one that you have already created.

[@sibinkuttan]

Sunny you are a champ..

[@jubinsurana1140]

Thank you 😬 for the video bro Love from india

[@muhammadriaz6544]

Networking has been made a piece of cake by Sunny - :-) Excellllllent.

[@sunnyclassroom24]

Thank you for your appreciation.

[@farhadnoori6299]

Hi Sunny. Thanks for your great videos. But i have a question. Why Bob attaches the digital certificate to his public key, since the public key is already contained in the digital certificate?

[@sunnyclassroom24]

You are correct. The word "attach" might be confusing. I mean Public key and digital certificate go together. Digital certificate just verifies the public key belongs to the claimed owner.

[@farhadnoori6299]

Ok, got it. Many thx

[@sudhanshupal4427]

Thanks a lot Sir !!!

[@sunnyclassroom24]

you are welcome!

[@rimalagoc514]

I am confused sir I thought if we are using a pair of key... the receiver will create this pair of key to be given to the sender?please enlighten me. Your the best by the way.

[@beatspongebob9643]

thank you so much this helped my cpa exam it section

[@sunnyclassroom24]

Great to hear!

[@atuljain5539]

excellent !!!

[@sunnyclassroom24]

Many thanks!!

[@Robertsmith-un5cu]

your music is the best

[@kisomosebrian3148]

Thanks much. You are good.

[@sunnyclassroom24]

Thanks a lot for your kindness.

[@kisomosebrian3148]

@@sunnyclassroom24 You are most welcome.

[@marcosantoriello2606]

Hi Sunny, great video! One thing, when you says: Anyone can pretend to be Bob. In the video of digital signature you explained that Alice can confirm that the message is not altered in transit by comparing the hash. So, how a hacker can intercepts a message, modify it and send to Alice the same hash previously created by Bob? Thanks Marco

[@fredrickalonge1339]

The hacker intercepts Bob's message via active techniques (mitm attacks) , modifies it and forward the modified message (he change the content i.e the hash) to Alice instead.

[@Sai-nt4jk]

Hi sunny, in the video of digital signature you explained that one of the purpose is authentication but in this video u told it is weakness so we are using digital certificate, can you help me to understand this

[@alphabetabs]

Great one !!! In the video when you have introduced a digital certificate you could have brought a hacker again and showed why it is not possible to pretend like Bob anymore. Please see if it can be possible to accommodate this.

[@dungnguyenmanh1540]

Nice explanation. But, Can digital certificates be forged?

[@miratorimoonlightkim4413]

Sir, but why can't hacker intercept the message with digital certificate and create an entire new message and fake certificate and send it to alice?

[@sunnyclassroom24]

great question. our browser would check digital certificate if it is valid because our popular browser has pre-loaded with major CA's public keys and also our browsers would actively work behind scene with CA's servers to make sure digital certificates are real and valid.

[@praaksh]

Hi Miirar, Its a good ques! In a real world scenario, ideally an client(browser) interacts with the server and when the server returns the digital certificate, the browser validates the CN(Common name) of the server to verify its identity, normally the domain name(say google.com) would the Common name(CN), when as mentioned by you, if the hacker intercepts the message and presents a fake digital certificate, the browser identifies that the Common Name is different(say xyz.com) than that of the reqested one(which google.com), browser alerts us by throwing the error message NET::ERR_CERT_COMMON_NAME_INVALID, Additionaly also the pad lock turns to red colour.

[@cyberlinksitcollege7traini557]

Good question .. actually the receiver will send the certificate of insurance to the CA and after CA confirm than it will start further communication

[@SantoshSharma]

Great video---can you please tell me . when digital signature is sent to client then its encrypted. also along with this plain text message is sent. so if i take wireshark capture where i can see that plain text message

[@sunnyclassroom24]

you are correct. The message will also be encrypted in real life. Here we just focus on digital signature. Otherwise, it involves too much steps. Text message must be encrypted, and the receiver must de-encrypt the message first, then use the message to test if the digital signature is authentic.

[@sibiramm6107]

Could u please explain how blockchain works and how it is employed in Bitcoins...,etc

[@shikharchaudhary6984]

Good Man Sunny

[@monirzaman337]

Can we say that the X.509 is the framework for Digital Certificate?