CS 142 Lecture Notes: Securing the Connection Certificates CS 142 Lecture Notes: Securing the Connection
SSL/TLS Overview Most common: only the server is authenticated Browser client-hello server-hello + {server-cert}SKCA Key exchange (several options) Random key K client-key-exchange: {K}PKserver k {HTTP data}K Most common: only the server is authenticated CS 142 Lecture Notes: Securing the Connection
CS 142 Lecture Notes: Securing the Connection HTTPS Indicators Firefox 3: (no SSL) (SSL) Click on fav icon gives pop-up on bottom. CS 142 Lecture Notes: Securing the Connection 3
Mixed Content Indicators silly dialogs IE7: No SSL lock in address bar: CS 142 Lecture Notes: Securing the Connection
Mixed Content Indicators, cont'd Firefox 3.0: No SSL indicator in address bar Clicking on bottom lock gives: CS 142 Lecture Notes: Securing the Connection
CS 142 Lecture Notes: Securing the Connection