The DMZ

« first day (2205 days earlier) ← previous day next day → last day (2973 days later) »

deostroll

18:17

I was just reading how ssl works? It says that a client has to trust the certificate? I don't understand this process? Especially in case of browser software...

I type in http://github.com, the servers at github will instruct my browser to visit https://github.com...

So assuming my operating system is freshly installed...and I am using the browser the first time...how does my browser program trust github's certificate?

4 hours later…

Limit

22:27

Just connected to the Atlanta, Georgia airport wifi and every public web page of mine seems to have a red close button on the bottom left side. Something definitely is fishy here

I am not sure if using wireshark at a public place like this is legal :-/

AviD

@Limit as long as you make sure you dont have promiscuous mode or anything like that activated, you're gold, since you're only looking at your own traffic.

787

Q: How does SSL/TLS work?

How does SSL work? I just realised we don't actually have a definitive answer here, and it's something worth covering. I'd like to see details in terms of: A high level description of the protocol. How the key exchange works. How authenticity, integrity and confidentiality are enforced. What ...