TLS Handshake - EVERYTHING that happens when you visit an HTTPS website

TLS (formerly SSL) is the protocol that makes it safe to do anything on the Internet. It's the protocol that enables that little padlock which gives you the green light to put in your password or bank account number. In order to get the padlock, however, something has to occur between you and the website you are visiting... that something is known as the TLS handshake. The TLS handshake validates the two endpoints in the conversation, and exchanges the cryptographic material used to create Session keys which will then protect the web browsing session with Encryption, Integrity, and Authentication. In this video, I'll show you every step of the handshake, what the client knows, what the server knows, and everything they exchange and learn from what is sent across the wire. I'll show you how they create each key involved in securing internet communication. To be clear, this Handshake also occurs every time you use an SSL VPN as well, and as time goes on, will be used anytime _any_ communication occurs over a computer network. 00:00 - Teaser / Intro 00:40 - TLS Handshake - Background Information 02:25 - Client and Server - the starting point 03:12 - Client Hello - Version, Random Number, Session ID, Ciphers, Extensions 05:16 - Server Hello - Version, Random Number, Session ID, Ciphers, Extensions 07:58 - Server Certificate - Full Certificate Chain 08:38 - Server Hello Done 09:11 - Client Key Exchange - RSA Key Exchange 11:36 - Pre Master Secret, Master Secret, Session Keys 13:56 - SSL/TLS Create TWO secure tunnels 15:53 - PseudoRandom Function (PRF) 17:38 - Do the Client & Server know they have the right keys? 18:22 - Change Cipher Spec (from Client) 18:56 - Client Finished 21:42 - Server Finished & Change Cipher Spec 24:17 - Sharing Protected Application Data 25:04 - Outro & Summary 26:13 - TLS 1.3 Changes Everything... Practical TLS Discount 🔑 More free lessons from the course: https://www.youtube.com/playlist?list=PLIFyRwBY_4bTwRX__Zn4-letrtpSj1mzY 🔐 More details about the course: https://classes.pracnet.net/courses/practical-tls 🏢 Do you configure or troubleshoot TLS/SSL for work? If so, I'm willing to bet your employer would happily pay for this SSL training. Reach out if you'd like to coordinate an introduction for a bulk license purchase with your company. I'm happy to provide a generous referral bonus =) 💬 Join Practical Networking Discord https://discord.com/invite/yrexngJ #ssl #tls #cybersecurity