Introduction to SSL and TLS Flashcards
what is HTTPS?
HTTPS is the secure version of HTTP. All data that is sent over with HTTPS is encrypted
what is 301 HTTP redirect response code?
A 301 redirect signals a permanent move from one URL to another, meaning the page in question has moved location.
Often this is used when we redirect HTTP URLs to HTTPS URLs
When you see wildcards like * in the domain name of the certificate , eg like in attached screenshot what does it mean? eg. *.google.com
It means the certificate is for google.com and all its sub domains.
What is fingerprint in a certificate? eg. SHA1 and SHA256?
- Fingerprints are called hashes of the certificates
- Used to check the integrity of the certificate
- Every certificate has fingerprint and they are used to check the integrity of the certificate
What does this inspect of a web page tell you , specifically what is that schema column?
It shows the different images, JS files and docs that were downloaded for this web page , and schema shows they were all downloaded using HTTPS schema.
The Domain column shows the domain where each file was downloaded from.
What is a website?
A website is a different set of images or files that are downloaded from different domains
What does this page show you
THis shows the requests and the size. Which means to load that particular web page, 30 requests were sent and the size of images and files that were downloaded are 1.76 Mb
When using HTTPS, what extra header layer do you see in the packet capture?
We will see TLS layer after the TCP layer
How is HTTP sent over TLS safe?
data sent over TLS is fully encrypted
How is HTTPS and TLS related?
In HTTPS, all data is sent using TLS protocol, and TLS is responsible for encryption of data that is sent over it
