TLS in Action The handshake before https://, record by record: the key agreement, the certificate and the checks a client makes, then the password inside the encrypted connection
◀ Prev
Step ▶
▶▶
Restart
Load an example…
A handshake, then the password encrypted
The same request over plain http
Two pages on one connection
The names on the certificate
A self-signed certificate in the browser
An expired certificate
A certificate for another site
An impostor with the real certificate
curl and self.crt: refused, -k, --cacert
--cacert replaces the trust store
What -k lets through
curl checks the name after the handshake
Messages so far click a row to go back to it