Web Technology

SSL Certificates: Serving secure web content over HTTPS

- 25 Comments.

The cheapest place to buy SSL certificates that I’m aware of:
https://www.gogetssl.com/

Cloudflare introduces universal SSL
https://blog.cloudflare.com/introducing-universal-ssl/

Two good blog posts on how the TLS handshake works:
http://blog.hartleybrody.com/https-certificates/
http://www.moserware.com/2009/06/first-few-milliseconds-of-https.html

Video explaining the math behind public encryption
https://www.youtube.com/watch?v=3QnD2c4Xovk

self-signed certificate example:
https://selfsigned.jelled.com/

Google’s announcement that they would begin discrediting sites that use SHA-1 certificates:
http://googleonlinesecurity.blogspot.com/2014/09/gradually-sunsetting-sha-1.html

Google’s announcement that they will begin giving a ranking boost to sites serving content over HTTPS.
http://googlewebmastercentral.blogspot.com/2014/08/https-as-ranking-signal.html

Comcast has been caught injecting ads into websites. They can’t do this if the site is served over HTTPS.
https://www.techdirt.com/articles/20140908/07191228453/comcast-using-packet-injection-to-push-its-own-ads-via-wifi-apparently-oblivious-to-security-concerns.shtml

Related Posts

HTML Lecture 1 – Introduction to HTML, First HTML Example, Features of HTML

Introduction to Web Application Servers

Introduction to CSS | Web Technologies Tutorial | Mr.Subbaraju

25 Comments on “SSL Certificates: Serving secure web content over HTTPS”

  3. I like your videos, they're short and combines theory and lil bit of programming too! :)

  8. Awesome ! Please help to know more about SSL certificates ..plz share more docs if you have ..

  9. Hi I was wondering if you could help me with some questions:
    Having obtained a personal Certificate from Certificate Authority (CAert WoT) to send encrypted mails, with my email, certificate fingerprints , key info, and checksums (with SHA1 and MD5 algorithms), my questions are:
    1)Is it possible for a dedicated attacker with unlimited resources to circumvent these protection mechanism?
    2)If it is possible, why is this mechanism still in place?
    3)Propose a way of distributing the root certificate that does not suffer the problems you’ve pointed out.
    Thanks in advance!

  11. Thanks for sharing this informative video to here. Good Job. I got 90 days free ssl certificate for my website from Comodo.

  14. Very nice explanation. Could you explain Heartbleed bug related to ssh in one of your future videos.

Comments are closed.