1. CS 142 Lecture Notes: Securing the Connection
Certificates
CS 142 Lecture Notes: Securing the Connection

2. SSL/TLS Overview Most common: only the server is authenticated Browser
client-hello
server-hello + {server-cert}SKCA
Key exchange (several options)
Random key K
client-key-exchange: {K}PKserver k
{HTTP data}K
Most common: only the server is authenticated
CS 142 Lecture Notes: Securing the Connection

3. CS 142 Lecture Notes: Securing the Connection
HTTPS Indicators
Firefox 3:
(no SSL)
(SSL)
Click on fav icon gives pop-up on bottom.
CS 142 Lecture Notes: Securing the Connection 3

4. Mixed Content Indicators
silly dialogs
IE7:
No SSL lock in address bar:
CS 142 Lecture Notes: Securing the Connection

5. Mixed Content Indicators, cont'd
Firefox 3.0:
No SSL indicator in address bar
Clicking on bottom lock gives:
CS 142 Lecture Notes: Securing the Connection

6. CS 142 Lecture Notes: Securing the Connection