TLS (formerly SSL) is the protocol that makes everything on the Internet secure. It's the protocol that activates the little padlock that gives you the green light to enter your password or bank account number. To get the padlock, however, something has to happen between you and the website you're visiting… that something is called a TLS handshake.

The TLS handshake validates the two endpoints in the conversation and exchanges the cryptographic material used to create session keys, which then protect the web browser session with encryption, integrity, and authentication.

In this video I show you each step of the handshake, what the client knows, what the server knows, and everything they exchange and learn from what is sent over the wire. I show you how they create each key needed to secure internet communications.

To be clear, this handshake also occurs every time you use an SSL VPN, and over time will be used whenever _any_ communication occurs over a computer network.

00:00 – Teaser/Intro
00:40 – TLS handshake – background information
02:25 – Client and server – the starting point
03:12 – Client Hello – version, random number, session ID, ciphers, extensions
05:16 – Server Hello – version, random number, session ID, ciphers, extensions
07:58 – Server certificate – Complete certificate chain
08:38 – Server Hello Done
09:11 – Client key exchange – RSA key exchange
11:36 – Pre-Master Secret, Master Secret, Session Key
13:56 – SSL/TLS Create TWO secure tunnels
15:53 – Pseudorandom function (PRF)
17:38 – Do the client and server know that they have the right keys?
18:22 – Change cipher specification (from the client)
18:56 – Customer finished
21:42 – Server ready and encryption specification changed
24:17 – Share protected application data
25:04 – Outro & Summary
26:13 – TLS 1.3 changes everything… Practical TLS discount

More free lessons from the course:
https://www.youtube.com/playlist?list=PLIFyRwBY_4bTwRX__Zn4-letrtpSj1mzY

Further details about the course:
https://classes.pracnet.net/courses/practical-tls

Do you configure or troubleshoot TLS/SSL issues for work? If so, I'm sure your employer would be happy to pay for this SSL training. Get in touch if you'd like to coordinate a bulk license purchase introduction with your company. I'd be happy to give you a generous referral bonus =)

Join Practical Networking Discord
https://discord.com/invite/yrexngJ

#ssl #tls #cybersecurity

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.