TLS Handshake Explained: How Your Browser Secures HTTPS Connections 🔒

TLS (formerly SSL) is the protocol that makes it safe to do anything on the Internet. It's the protocol that enables that little padlock which gives you the green light to put in your password or bank account number. In order to get the padlock, however, something has to occur between you and the website you are visiting... that something is known as the TLS handshake.

The TLS handshake validates the two endpoints in the conversation, and exchanges the cryptographic material used to create Session keys which will then protect the web browsing session with Encryption, Integrity, and Authentication.

In this video, I'll show you every step of the handshake, what the client knows, what the server knows, and everything they exchange and learn from what is sent across the wire. I'll show you how they create each key involved in securing internet communication.

To be clear, this Handshake also occurs every time you use an SSL VPN as well, and as time goes on, will be used anytime _any_ communication occurs over a computer network.

00:00 - Teaser / Intro
00:40 - TLS Handshake - Background Information
02:25 - Client and Server - the starting point
03:12 - Client Hello - Version, Random Number, Session ID, Ciphers, Extensions
05:16 - Server Hello - Version, Random Number, Session ID, Ciphers, Extensions
07:58 - Server Certificate - Full Certificate Chain
08:38 - Server Hello Done
09:11 - Client Key Exchange - RSA Key Exchange
11:36 - Pre Master Secret, Master Secret, Session Keys
13:56 - SSL/TLS Create TWO secure tunnels
15:53 - PseudoRandom Function (PRF)
17:38 - Do the Client & Server know they have the right keys?
18:22 - Change Cipher Spec (from Client)
18:56 - Client Finished
21:42 - Server Finished & Change Cipher Spec
24:17 - Sharing Protected Application Data
25:04 - Outro & Summary
26:13 - TLS 1.3 Changes Everything... Practical TLS Discount

🔑 More free lessons from the course:
https://www.youtube.com/playlist?list=PLIFyRwBY_4bTwRX__Zn4-letrtpSj1mzY

🔐 More details about the course:
https://classes.pracnet.net/courses/practical-tls

🏢 Do you configure or troubleshoot TLS/SSL for work? If so, I'm willing to bet your employer would happily pay for this SSL training. Reach out if you'd like to coordinate an introduction for a bulk license purchase with your company. I'm happy to provide a generous referral bonus =)

💬 Join Practical Networking Discord
https://discord.com/invite/yrexngJ

#ssl #tls #cybersecurity