Overview
Course Content
0 / 39 completedOverview
The Importance of Confidentiality
The Rise and Rise of HTTPS
Understanding a Man in the Middle Attack
The Importance of Integrity
The (Perceived) Barriers to HTTPS
The Importance of Authenticity
Summary
Abuses of Unencrypted Traffic Are Everywhere
The Big Browser Shift
Course Overview
Overview
The TLS Handshake
Using badssl.com
SSL and TLS
Issuing Certs for Development
Certificate Authorities
Intercepting HTTPS Traffic During Debugging
Summary
Redirecting from HTTP to HTTPS
HTTP Strict Transport Security (HSTS)
Preloading HSTS
Understanding Mixed Content
Using a CSP to Upgrade or Block Insecure Requests
Secure Cookies
The Impact of HTTPS on Server Performance
Making HTTPS Go Fast on Clients
Cost and Complexity
HTTPS Adoption of Downstream Services
Using Cloudflare for Free
Using Let’s Encrypt for Free
TLS and HTTPS Acronyms
Public Key Pinning
Extended Validation Certificates
SSL Labs
Other Reasons to Adopt HTTPS
The Tide Is Rapidly Turning
HTTPS Blind Spots
Summary