All articles

Tag

#tls

15 articles

Encryption

Public Key Infrastructure (PKI) Explained

Learn how Public Key Infrastructure (PKI) secures the web with certificates, CAs, and trust chains. Discover how PKI protects every HTTPS connection you make.

·9 min ·intermediate

Encryption

How Certificate Revocation Works (CRL vs OCSP)

Learn how Certificate Revocation Lists (CRL) and OCSP let browsers check if a TLS certificate is still valid — and why OCSP stapling is the modern standard.

·9 min ·intermediate

Encryption

TLS 1.3 vs TLS 1.2: What Actually Changed

TLS 1.3 cuts handshake latency in half and removes every cipher suite behind the worst HTTPS attacks. Learn exactly what changed and why upgrading matters.

·9 min ·intermediate

Encryption

What Is a Cipher Suite

Learn what a cipher suite is, how to read its naming convention, and how the TLS protocol uses them to negotiate secure, encrypted HTTPS website connections.

·8 min ·beginner

Encryption

RSA vs ECC: Choosing the Right Public Key Algorithm

RSA and ECC both power public key cryptography, but TLS 1.3 has already chosen. Learn the key-size tradeoffs, performance differences, and what to deploy.

·9 min ·intermediate

Encryption

How Ephemeral Keys Work

Learn how ephemeral keys power perfect forward secrecy in TLS, why they differ from long-term keys, and how ECDHE protects past sessions from future compromise.

·9 min ·intermediate

Encryption

Encryption at Rest vs in Transit: Key Differences Explained

Understand the critical differences between encryption at rest and in transit. Learn how these two methods work together to secure your data from end to end.

·8 min ·beginner

Encryption

What Is Perfect Forward Secrecy

Understand Perfect Forward Secrecy (PFS), how ephemeral keys protect past communications from future decryption, and why RSA key exchange is obsolete.

·8 min ·beginner

Encryption

TLS Handshake Explained: Symmetric and Asymmetric Keys

Learn how the TLS handshake works, how symmetric and asymmetric keys protect every HTTPS connection, and why TLS 1.3 made it faster and far more secure.

·9 min ·intermediate

Encryption

How Key Derivation Functions Work

Understand how key derivation functions like HKDF and PBKDF2 transform secrets into strong encryption keys, and when to use each type for secure systems.

·9 min ·intermediate

Encryption

What Is a Certificate Authority (CA)

Learn what a Certificate Authority (CA) does, how it issues digital certificates, and why the internet relies on CAs for trust and secure HTTPS connections.

·8 min ·beginner

Encryption

Man in the Middle Attack: What It Is and How to Prevent It

Learn what a man in the middle attack is, how hackers exploit it to intercept sensitive data, and why strong encryption like TLS is the best defense today.

·6 min ·beginner

Encryption

mTLS Explained: Mutual TLS for Zero-Trust APIs

Learn how mTLS mutual TLS works, how it authenticates both client and server, and why it is the standard for securing zero-trust API and microservice traffic.

·9 min ·intermediate

Encryption

How Certificate Pinning Works

Learn how certificate pinning protects mobile apps and APIs from man-in-the-middle attacks by locking connections to specific certificates or public keys.

·9 min ·intermediate

Encryption

Certificate Transparency: How CT Logs Stop Bad TLS Certs

Learn how Certificate Transparency logs expose misissued TLS certificates in real time, protecting websites and users from rogue certificate authorities.

·8 min ·intermediate