how can you revoke a certificate .. expiry I do understand there will be a date in certificate.. but expiring will be difficult as client/browser never connects to CA for validation. as long it is decrypted by server public key its considered ok
simply love your work, I have been bing watching for the last 2 months now .... subscriber your channel under 30k subs. I see now 300-400 new subs everyday and I am not surprised when you will getting those silver/golden shields coming your way very sooon ...... !!! (Y)(Y)
The hacker can never get a EV certificate. DV can be obtained just by modifying the DNS record, but for EV all the legal procedures has to be completed. But still the MTM attack can happen if the user is not checking the certificate is EV. In the end user need to be cautious.
@@hnasr thank you Hussein, I mean programatically, I 'm building an application, the users can upload a certificate, and from my backend I need to verify if the certivicate is ev certificate.
Good explanation thanks.
how can you revoke a certificate .. expiry I do understand there will be a date in certificate.. but expiring will be difficult as client/browser never connects to CA for validation. as long it is decrypted by server public key its considered ok
thanks for the help!
Hey @hussein, would it be possible for you to discuss a short video on mTLS - Mutual TLS ? :)
Asfar Shah good idea
simply love your work, I have been bing watching for the last 2 months now .... subscriber your channel under 30k subs. I see now 300-400 new subs everyday and I am not surprised when you will getting those silver/golden shields coming your way very sooon ...... !!! (Y)(Y)
How does EV solve MITM attack? missed that point in the video.
The hacker can never get a EV certificate. DV can be obtained just by modifying the DNS record, but for EV all the legal procedures has to be completed. But still the MTM attack can happen if the user is not checking the certificate is EV. In the end user need to be cautious.
how can we test if a certicate is an ev certificate, I mean not manually? Is there a way to know this information from the certificate content.
I think the browser shows that. Go to digicert website their website has an Ev cert
@@hnasr thank you Hussein, I mean programatically, I 'm building an application, the users can upload a certificate, and from my backend I need to verify if the certivicate is ev certificate.
5:33 accidentally draws a swastika LOL