GenCyber Day 5 5.2 HTTP and HTTP

Objectives of Lesson 5.2 Explain the difference between HTTP and HTTPS Explain how SSL and TLS work Identify websites that use HTTP versus HTTPS

Questions What is the Internet? How old is the Internet? The locations of the first 2 computers on a WAN?

History Review 1962 - 1967 DARPA Project: Research for ARPANET For sixty years, DARPA has held to a singular and enduring mission: to make pivotal investments in breakthrough technologies for national security. 1968 The first router was built 1969 UCLA, Stanford, UC Santa-Barbara, and Utah nodes added 1972 Electronic Mail

History Review 1973 International nodes (England and Norway) 1976 Queen Elizabeth II sends her first email 1982 TCP/IP named official protocol suite of ARPANET 1983 DNS creates .org, .net, .gov, .mil, and .edu 1987 20,000 nodes on Internet / Cisco releases their first router

History Review 1990 HTML, HTTP, and URL 1991 The World Wide Web is introduced to the public 1993 600 websites / Whitehouse and United Nations sites go up 1994 Netscape Browser and SSL 1996 First video to go viral (remember what it was?)

Phases of HTTPS Connections Client communicates with site - SSL/TLS version and ciphers (hello) Site responds with SSL/TLS version and ciphers (hello back) Client verifies certificate and sends encrypted pre-secret to site (authentication) Server decrypts pre-secret (start of encryption setup) Server and client develop the secret (start of encryption setup) Server and client agree that all communications are now encrypted

Exercise 1 Using your laptop, connect to CTSPublic Using the white search box (lower left)

Exercise 1 Type Chrome in the search box Second: click on Chrome to open it Type Chrome in the search box Click on Google Chrome to open it First, type Chrome in the search box

Exercise 1 Using the Chrome browser, visit https://www.google.com Once the Google page loads, click the green padlock

Exercise 1 Click on Certificate (valid)

Exercise 1 Review the certificate details

Exercise 2 Using Chrome, visit https://www.ssllabs.com/ssltest/

Exercise 2 Type in one of your favorite sites (not google.com) that uses HTTPS and click Submit

Exercise 2 Review the results

Resources https://www.internetsociety.org/internet/history-internet/brief-history-internet/ https://blog.scienceandmediamuseum.org.uk/brief-history-internet/