Intro to Digital Certificates
Vložit
- čas přidán 30. 04. 2017
- This tutorial starts with a review of Symmetric and Asymmetric (PKI) Encryption. It discusses self signed certificates and how an SSL certificate is used in a Client-Server web communication session.
05:31 digital certificate 06:31 trust 06:45 CA 06:52 A certificate authority validates the identity of the certificate holder 07:21self-signed certificate 08:55 user identification 12:37 self-signed certificate 15:14 testing 15:25 self-signed certificate , root certificate 17:18
This is the second in a series on how encryption and certificates work. Other videos are:
Introduction to Encryption
Certificates: Chain of Trust
Undoubtedly, the best explanation of PKI and digital certificates. Thanks Dave!
I agree
05:31 digital certificate 06:31 trust 06:45 CA 06:52 A certificate authority validates the identity of the certificate holder 07:21self-signed certificate 08:55 user identification 12:37 self-signed certificate 15:14 testing 15:25 self-signed certificate , root certificate 17:18
I spent 2 hours in the class and couldn't think it through but it only took me 21 minutes to understand via this video. Thank you David!
Yeah fer real. This presentation was well done and easily understood. Now I have cleared up a lot of confusion previously in my mind. Thanks a million to David
Very well explained Dave ! Helped clear understanding of flow between browser and webserver. Keep uploading the such great videos. Many Thanks
very pleased with the explanation - i watched about 4 videos about digital certificates and this is the one which got me understanding it properly.
Thank you. have seen many tutorials but this is the first one that makes complete sense to me ! Best wishes...
I've been scrambling to figure out PKI the past few days and this video really helped me glue all the pieces together to solidify my knowledge of PKI. Thank you!!!
Wow! Really great explanation. Really clears up a lot of questions I had about CA, Digital certs and how TLS uses asymmetric/symmetric encryption and why symmetric is better. All of of this knowledge in one place! Thank you.
This was really informative video . Thanks Dave ! Hope you keep creating these type of instruction content !!
Great! Finally I got the whole process. Thanks a lot!
Along with great information presentation style, the presenter has a perfect knowledge reinforcement/voice/speed balance, which makes the info really sink in. No accent helps to stay focused as well.
Amazing video. Thanks Dave for making it so nice and clear.
The best tutorial in the net about certificate
The best explanation I have encountered. Made it very simple and clear. Thank you !
Thank you for sharing. This is great - explained in its most simplest form.
I have been working on my understanding of certificates and PKI. This clarified a few additional things for me. Thank you for the info and details!
Thanks for this video, best explanation on the net.
Dave! Great video! I'm very impressed how simple is that! Thank you!
Thanks for the amazing Tutorial!
Great video! I love how you broke it down and walked through it nicely. Thank you.
One of the best explainer videos. Very easy to understand and covers all the basics
Dave - Thank you so much for sharing this. It is a great review even if you deal with it a lot. Good work
Many Thanks !!! for your kind and detail Explanation.. God Bless You !!!
Lovely lecture! You took enough time to explain the concepts at ease.. Thanks.
One of the best explanations on this topic. Thanks Dave 👌
Thanks for the video! This finally made it click for me.
Explanation is complete with the real time example.
Though i know these things, i still liked the way you explained.
Thanks a lot.
Perfectly explained. Great Job. It helped me a lot. Thanks, Mr.Dave
Thanks Dave, you're a great teacher.
Amazing explanation! Concise and clear
OMG, you answered all the questions I didn't know I had. Thank you!
He is really an expert on this subject. Very well explained, understood the concept.
The best explanation video on the web. Thanks for creating this Dave.
well explained. thank you Dave.
Dave, Thank you very much for such a clear and complete explanation.
I had a doubt between public & private key but, after going through your video session I got the difference between them.
Taking Security+ in 2 weeks. Every bit of extra info helps. Thank for clearly explaining ssl communication.
best tutorial. thanks a lot Dave !!
such a wonderful explanation...I really appreciate the effort
DONE thanks moved notes to onenote
6:25 digital certificate includes the public key only not the private key
8:30 how user/server gets a certificate from a certificate authority. The user generated their own public and private keys, they give that along with their identification to a certificate authority. This is called a certificate signing request CSR. The certificate authority then signs the certificate and gives it back to the user.
9:45 the certificate contains: public key only not private obviously, the CA identification and certificate owner/public key owner identification
10:30 how to make a CSR certificate signing request
.key file contains key
12:41 self signed certificate
A CA signing the certificate provides TRUST that the public key belongs to the person we think we are talking to. However, the certificate itself containing the public key that we use for encryption is what provides the encryption. Without a CA, we can still have encryption, but we can’t trust that when we connect to a server, the server/person responding is who they say they are (man in the middle attack). When the certificate is signed by a CA, we can be sure that they are who they say they are.
Example, we think we are talking to Alice, but bob intercepts the message and sends us his own public key and says I am Alice. We think we are talking to Alice, but we are actually talking to bob. Our messages are still encrypted though but now bob can read them. A CA tells us hey this public key actually does belong to Alice so you can go ahead and use it to encrypt your message.
15:30 so just using a self signed certificate allows you to encrypt messages, but you are vulnerable to a man in the middle attack. To mitigate this, you need a CA to check with it “hey does this public key belong to person x”. You can set up a self signed CA (called a self signed CA because you usually non-root CAs are signed by another root CA - chain of trust) and create a root-certificate. You need to install the root certificate in every machine in your organization (like the hardcoded root CAs in your OS or web browser)
17:40 TLS flow
Thanks for the tutorial, it's much faster than any other method I came across.
This is simply brilliant..and brilliantly simple..great job!!
UHTi iklkouuo
Great tutorial Dave! you made it simpler to understand
This is just awesome... The first diagram was worth millions
This is very helpful for the reader simply explained and with good examples. Really amazing video.
Perfect demonstration, it include awesome theory and practical .
I am fan of you video now !
Thanks a lot...i have been in IT field for a long time...many times i tried to understand keys, certificates etc... finally this video gave me a clear understanding ..thanks again.
This world needs more people like you
This is truly informative thanks much sir!
Thanks for the great explanation. This helped a lot to understand the topic!
this video gives lot of information in very simple terms. thank you
best explanation ever! Thank you!
Beautifully explained!
Amazing, best digital certificate explanation on youtube!.
This is crystal clear!
Very well explained. Thank you
I'm so glad I found this!!!!! Thank you!!! :-)
Very good tutorial , covering symmetric , asymmetric keys , SSL , how certificate is generated and signed......
SO SO SO easy to understand, thank you !
Good one. This tutorial has cleared my basic concepts about ssl
i'm now your subscriber ! Great job Dave !!
Awesome video
Complex concepts explained in simple way
Appreciate your efforts
Great explanation! Thank you.
Excellent tutorial. Thank you.
Very good explanation, thanks for the effort!
The best tutorial
Thanks a lot, great tutorial.
Wow! I am really impressed. Thank you sir! Much love from germany
Excellent explanation of a complex topic. Beginning the video with a review of symmetric and asymmetric encryption was super helpful and really paid off at the end. Thank you for producing and sharing this video!
Thanks for the comment
Thank you for this amazing clear explanation
Ive been in this industry for years, I tell you this is the most comcise, informative and to the point video about cert. Thank you
one of the best explanation i saw on the subject, specialy on the self certificat CA
thank you
this gives a very good understanding about the subject... kudos
Nice explanation !!
wonderful explanation !!!
PKI and Certificates are always a tricky subject. This is so far THE best video I've seen going into depth on the subject. I would recommend this video to anyone in IT.
Thanks Charlie.. sometimes hard to find that balance of going into enough detail but not so much detail that the overall concept gets lost.
Excellently explained
The best explanation I have heard. Very calm and clear. I got everything and I an not language native.
thanks for the kind feedback. Glad it helped with this topic.
Very clear, thank you!
thanks a lot for a informative video. Very well explained!
Watch at 2x speed, very great breakdown!
Excellent explanation.. Best on Internet
Great tutorial. It took me a while to shake off the confusion caused by hearing "ncss.ca" and assuming the .ca meant it was a CA.
CA=Canada
You are right. It took me a while too.
Better to use .com for example. (ca seemed to be CA at first.)
yes.. If I redo.. I will not use .CA.. am so used to that domain; being from Canada...
@@davecrabbe4579 ... no issue for us Canadians :)
Thank you very much for this video!
Great Video! Life Saver.
Thanks a lot sir...very detailed lecture finally i understood this topic
Thanks a lot Dave the video was a bit slow but now I understand completely the key exchange!!!!
Excellent explanation.
Thank Sir. Great lecture. 🙏
Nice explanation!
Fantastic video thank you!
Thanks great explanation (y)
Thanks a lot, quick and clear.
Amazing video on digital Certs, if you land here just think you got your answers with this video
Awesome explanation
Wow great explanation!!
Thanks.. nicely explained.
You the best one explain that
Outstanding.
Great job... thanks !