How does HTTPS work? What's a CA? What's a self-signed Certificate?

แชร์
ฝัง
  • เผยแพร่เมื่อ 31 มี.ค. 2018
  • Is HTTPS really that difficult? Do I need to know crypto theory and a lot of math to understand it? You don't! This video explains how HTTPS works in very simple terms. It will touch upon encryption and digital signatures, as well as explaining what a trusted Certificate Authority is and what a self-signed certificate is.
    We will build upon this knowledge in upcoming videos, when we plan to issue a self-signed certificate to secure a microservice app in a testing environment.
    You no longer have an excuse to say HTTPS is too complex. Because this video simplifies all the concepts in less than 12 minutes.
  • วิทยาศาสตร์และเทคโนโลยี

ความคิดเห็น • 714

  • @vibhupandey3702
    @vibhupandey3702 4 ปีที่แล้ว +1016

    This 11 min video was more educating then an entire course of pluralsight on How HTTPS works. Thank you for this.

    • @kameshkamesh9953
      @kameshkamesh9953 4 ปีที่แล้ว +25

      It is a fact bro....Plural sight is just waste of our time

    • @ShoppingBored
      @ShoppingBored 4 ปีที่แล้ว +9

      Lynda too 😂

    • @funkybunky64
      @funkybunky64 4 ปีที่แล้ว +5

      Pluralsight has such a bad rep for a reason. Wouldn't bother to give them money for anything.

    • @isabellez5671
      @isabellez5671 4 ปีที่แล้ว +5

      It's a fact that public youtube videos and human + ai information filtering are better that anything else. Great job
      kubucation!

    • @kaywulff2783
      @kaywulff2783 4 ปีที่แล้ว +2

      @@kameshkamesh9953 don't forget the money!

  • @natdarke3860
    @natdarke3860 3 ปีที่แล้ว +103

    I would like to add, for clarity, that:
    1. A message encrypted with a public key is used for secrecy
    - The message can only be decrypted with the corresponding private key, but you cannot verify who the owner is.
    2. A message encrypted with a private key is used for authentication
    - The message owner can be verified if you know the corresponding public key, but is not secret.
    - This is why a web browsers have a record of public keys for CA Authorities - so they can verify that a "public key certificate" is signed by the a real CA Authority

    • @kubucation
      @kubucation  3 ปีที่แล้ว +3

      Great addition, thank you!

    • @takatsukikum
      @takatsukikum 3 ปีที่แล้ว +1

      Thank you very much, that's the link I was missing.

    • @mohammedmclovin4450
      @mohammedmclovin4450 2 ปีที่แล้ว

      Awesome. This helped a lot!!

    • @PlayI3oyTN
      @PlayI3oyTN ปีที่แล้ว

      This helped! thanks

    • @aedaldaniel
      @aedaldaniel ปีที่แล้ว

      so you mean to say google exposes both public key and private key? then the attackers will be able to decrypt right?

  • @spaci1010
    @spaci1010 ปีที่แล้ว +4

    I was banging my head from 5 days to understand ssl setup to secure my kafka cluster..
    And finally my woes are over.
    Thanks from the deepest bottom of my heart

  • @maximiliandebian3172
    @maximiliandebian3172 ปีที่แล้ว +2

    Thank you my dear man...I was looking for a technical-but-not-too-technical explanation. I am a developer who needs to know just enough and everything else I could find was too basic.

  • @PauloSilva-yp6pl
    @PauloSilva-yp6pl 4 ปีที่แล้ว +9

    Finally!!! I’ve been looking for so long to understand it. After this video, the whole process now makes all sense in my mind.
    Awesome channel by the way. Keep doing it!

  • @senthilkumar5
    @senthilkumar5 4 ปีที่แล้ว +1

    Simple and elegant explanation.. it works as apartment mail box. We provide Public address to all interested party, we buy mail box from apartment building management. USPS post mail in our mail box. Only we have private key to unlock mail box and read all mails. It similar concept applied using cryptography on digital platforms. Thank you very much for the video.

  • @waterisalive2860
    @waterisalive2860 4 ปีที่แล้ว +26

    Thank you very kindly. You explain better than most profs, teaching is an art and you’re a natural. Keep up the good work

  • @LukeAmaral
    @LukeAmaral 4 ปีที่แล้ว +43

    Awesome. Came here for a refresher on HTTPS to prepare for interview and this video was way beyond what I expected to find in such a short video. You just got yourself a new subscriber. I admire people like you who can give so much information in a short time and in a way that is so easy to understand.

    • @kubucation
      @kubucation  4 ปีที่แล้ว +2

      Thanks a lot and best of luck for your interview!

  • @freebk161
    @freebk161 3 ปีที่แล้ว +1

    Lot of videos talk what is SSL and how it works, but your video talks extensively about certificates explaining why one needs to have it !!! Your way of explanation is very simple, without graphics, jargon. Thanks a bunch!!!

  • @harshg2003
    @harshg2003 4 ปีที่แล้ว +112

    Best explanation ever found on TH-cam till now

    • @yungnotfamous7331
      @yungnotfamous7331 3 ปีที่แล้ว

      Pratik Joshi wtf

    • @karthickramesh4411
      @karthickramesh4411 3 ปีที่แล้ว

      @@nutandevjoshi I am pretty sure you are the king of all sadist bastard in the whole world.

  • @Ryan-jb7fy
    @Ryan-jb7fy 3 ปีที่แล้ว +4

    I don’t know what it is but listening to videos that explain anything about technology in detail, I find calming. Loved the video.

  • @Gordin508
    @Gordin508 4 ปีที่แล้ว +4

    The diagram at 3:55 is very insightful. It manages to summarize what other videos fail to summarize in 20 minutes. Well done!

  • @KennethSorling
    @KennethSorling 2 ปีที่แล้ว +20

    Best, clearest and most concise explanation I've ever seen about this. Kudos!

  • @abdulwahabkhan1086
    @abdulwahabkhan1086 4 หลายเดือนก่อน +1

    Dude! This is the most simple version of this complex topic I've come across. Hats off!

  • @abhishekkumar-tu7nq
    @abhishekkumar-tu7nq 7 หลายเดือนก่อน +1

    I like it. This video, should be 1st video to view/watch, if anyone is starting with ssl, https, tls etc.

  • @jayeshmali7883
    @jayeshmali7883 3 ปีที่แล้ว +1

    After watching a couple of videos on HTTPS, I came to this video, now I feel that I don't need to search for any other videos.
    Best explanation ever, thanks for this video.

  • @terrancepinkney777
    @terrancepinkney777 3 ปีที่แล้ว

    Thank you for your time and efforts with this video. I 100% completely understand how HTTPS works with the browsers now with self-signed and CA. This even answered a question I had with a security software my company uses and a certain error message I would see. Great work!

  • @alvaro_ch
    @alvaro_ch 3 ปีที่แล้ว +4

    It´s delightful how you role the technical details out and still kept focused on the objective. Grats!

  • @jagan1957
    @jagan1957 4 ปีที่แล้ว +8

    Wow a lot of concepts in a nutshell.... Very effective!! Just one suggestion to add
    - The CA certificate which is signed by the CA authority statically resides in the computer either through browser or
    - If we have our own CA certificate, then we implant it into the browser by copying into it.
    So practically we can also mention in the video where the CA certificate is stored in each case which is the only missing part according to me. Thanks a lot for the video again!

    • @unhandledexception5988
      @unhandledexception5988 ปีที่แล้ว

      indeed he has mentioned it by saying "browsers comes together with many major ca's public keys."

  • @vetrim9654
    @vetrim9654 4 ปีที่แล้ว +26

    What an explanation! So much clarity and very well explained. Thank you so much for doing this!

  • @niranjanbk
    @niranjanbk 4 ปีที่แล้ว +5

    Beautifully made complex concept so simple to understand. All these years read multiple articles but this 11 min video just made wonders and injecting the complete concept of CA and HTTPS into my head.... Keep doing more of such wonders...

  • @weactweimpactcharityassoci3964
    @weactweimpactcharityassoci3964 2 ปีที่แล้ว +1

    Wow Sir
    I confess, even tough i spend years watching videos on HTTPS,
    it was a black box for me until u explained that
    My RESPECT SIR

  • @lubospokorny1723
    @lubospokorny1723 4 ปีที่แล้ว +19

    This is the best video on encryption I could reach on youtube, I would have appreciated if tls and ssl were brought to it aswell though.

  • @rashmichaudhury6831
    @rashmichaudhury6831 3 ปีที่แล้ว +2

    One of the best videos over TH-cam. Thankyou for explaining it so well.

  • @ali-kadar
    @ali-kadar 2 ปีที่แล้ว +2

    Thank you for this very clear and concise explanantion!
    Recenty my employer started with MITM monitoring and I found this tutorial video very useful in order to understand that. I also tried to understand the underlying mathematics behind RSA encryption which was quite interesting as well if any one of you cares to know.

  • @marveltracker
    @marveltracker 5 ปีที่แล้ว +3

    Wow. Mate you have amazing skills on explaining things. The neat and the best explanation on Https which I ever seen on the internet. Keep it up ur good work.

  • @Annndroid
    @Annndroid 2 ปีที่แล้ว

    One of the best videos for understanding SSL. I have been searching for a proper explanation since a long time and this video helped me understand what it really is.

  • @GururajBN
    @GururajBN 4 ปีที่แล้ว

    For so many years I have been just looking at https in the browser, without ever trying to know how it works. Thanks for the enlightening video👌

  • @vaib8940
    @vaib8940 4 ปีที่แล้ว +26

    Exactly what I was looking for for a long time!! Thanks a ton. This cleared all my doubts. I am marking this for future reference.

    • @vaib8940
      @vaib8940 3 ปีที่แล้ว +2

      More than Indians , corona has infected other nationalities. Get your facts right. And you can stay away stop commenting unnecessarily. I liked it, I commented. Not sure what hurt you.

    • @nutandevjoshi
      @nutandevjoshi 3 ปีที่แล้ว

      @@vaib8940 the word Indian is a swear word to be honest

    • @vaib8940
      @vaib8940 3 ปีที่แล้ว

      @@nutandevjoshi youtube is accessible to whosoever can access it, just like you and me. Refrain from making such silly comments. Your problem is not understood. Indian will continue to use youtube, you like it or not, so beat it boy

    • @nutandevjoshi
      @nutandevjoshi 3 ปีที่แล้ว

      @@vaib8940 I wish I could half of the Indians

  • @zcong3402
    @zcong3402 ปีที่แล้ว +1

    To those who wonder how CA makes sure the initial CSR request from a valid user: When you create a CSR request, the CA verifies if you really own this domain by sending a verification email ....etc, end of the day CA verify if the domain owner and the CSR requester are the same person. That's how the CA and server build the trust in that piece.

  • @HK-no9wm
    @HK-no9wm 5 ปีที่แล้ว +3

    Best explanation on TH-cam on this topic. Thank you sir

  • @vikititor
    @vikititor 3 ปีที่แล้ว +2

    5:25 is not self signed certificate.. dont confuse the beginners..
    it is your own CA..
    self signed is signed by him self..

  • @chenyangwang7232
    @chenyangwang7232 3 ปีที่แล้ว +2

    Finally! Finally, someone explains where and how HTTPS uses symmetric keys for encrypted communication!

  • @PrabhuKripaHai
    @PrabhuKripaHai ปีที่แล้ว +1

    This is the best, most precise and concise explanation. Thanks!

  • @TrippinCozy
    @TrippinCozy 4 ปีที่แล้ว +12

    Very, very well explained. Thank you so much!

  • @mridulranjan1069
    @mridulranjan1069 ปีที่แล้ว +5

    Has to be one of the best explanations ever, simple and to the point. Awesome job, thanks!

  • @renayearnshaw2961
    @renayearnshaw2961 2 ปีที่แล้ว

    Thanks for this - I can see myself coming back to this explanation time and time again, it's so clear.

  • @aswinivayyala5118
    @aswinivayyala5118 7 หลายเดือนก่อน

    I cannot stress enough, how informative and simplified this video..!!

  • @ameyapatil1139
    @ameyapatil1139 4 ปีที่แล้ว +208

    How on the earth did you create this magic. After eternity I could understand whats happening in the black box. Thank you.

    • @250txc
      @250txc 4 ปีที่แล้ว

      There is no magic. Period

    • @ameyapatil1139
      @ameyapatil1139 3 ปีที่แล้ว

      @@nutandevjoshi care to start with yourself ?

    • @nutandevjoshi
      @nutandevjoshi 3 ปีที่แล้ว

      @@ameyapatil1139 I am not an unwanted Indian.

    • @ameyapatil1139
      @ameyapatil1139 3 ปีที่แล้ว +1

      @@nutandevjoshi keep your own dumb unwanted opinion to your self

  • @staj
    @staj 4 ปีที่แล้ว +1

    Truly concisely and brilliantly explained. Thanks a lot Sir.

  • @ginmardoamatpawiro9570
    @ginmardoamatpawiro9570 4 ปีที่แล้ว

    Ok, i only saw it halfway. And the first part already started to make clearer sense to me. Background: a friend of mine explained this to me without me having any idea of the who does what and why. This video puts things (what I've been taught earlier and what is now being displayed) into perspective. Kudos :)

  • @thanasisathanasi4965
    @thanasisathanasi4965 5 ปีที่แล้ว +103

    At last. A video that gave me answers to my questions!!! Thank u brother! Come over for a beer!

  • @onhazrat
    @onhazrat 7 หลายเดือนก่อน +1

    🎯 Key Takeaways for quick navigation:
    01:24 🌐 HTTPS is based on public key cryptography and signatures, which are simpler than they may sound.
    03:28 🔐 HTTPS involves a secure key exchange process between the browser and the server.
    05:04 📜 Certificate Authorities (CAs) sign certificates to ensure the identity of the server, establishing trust.
    07:50 🛡️ Self-signed certificates can be used in controlled environments, but they may not be trusted by browsers.
    10:52 🏭 Upcoming videos will cover self-signing certificates and automating the process with Kubernetes.
    Made with HARPA AI

  • @arisk992
    @arisk992 3 ปีที่แล้ว

    Many people have the knowledge but far less people have the ability to pass it on. Kudos!

  • @martinbleach6019
    @martinbleach6019 2 ปีที่แล้ว +10

    Exactly the overview / summary / conceptual-level starting point I was looking for - and, for quite some time, failing to find! Thank you.

  • @jumaanrimzy6311
    @jumaanrimzy6311 4 ปีที่แล้ว +7

    This 11 minute clip worth than Most of the lengthy explanations and tutorials. Awesome work. subscribed

  • @MARSSS888
    @MARSSS888 4 ปีที่แล้ว +2

    This explanation is simply superb. It shows art of teaching as well :)

  • @joernhauser9831
    @joernhauser9831 2 ปีที่แล้ว +1

    Great explanation! So much information in such short time is a form of art

  • @meghanacr9285
    @meghanacr9285 3 ปีที่แล้ว

    finally glad to find such an easy explanation to HTTPS! Just amazing - thanks so much. Looking forward to learn more from your videos. Just happy now :-)

  • @bolu7361
    @bolu7361 3 ปีที่แล้ว

    This is one of the best videos made on HTTPS. Thank you!

  • @apocalypseapocalypsenuclea4624
    @apocalypseapocalypsenuclea4624 3 ปีที่แล้ว

    This was a very helpful and informative overview of HTTPS and certificates. Thanks for the video and best of luck on your channel!

  • @j.r.fernandez2453
    @j.r.fernandez2453 ปีที่แล้ว

    You're a brilliant teacher. Keep up the great work!

  • @saumyayadav8596
    @saumyayadav8596 3 ปีที่แล้ว

    Explanation is as transparent as water. Thank you.

  • @sanketlawangare8616
    @sanketlawangare8616 4 ปีที่แล้ว

    Thanks a lot for condensing this important concept in 11 mins and explaining in a simplified manner.

  • @heronleal3582
    @heronleal3582 2 ปีที่แล้ว

    I have watched around 10 videos with this subject. This was the best one.

  • @manoharjagtap1432
    @manoharjagtap1432 2 ปีที่แล้ว +2

    Very well brilliantly explained

  • @rdshenai
    @rdshenai 3 ปีที่แล้ว

    Best primer on knowing how HTTPS works and how certificates are obtained!

  • @abdulgafoor6309
    @abdulgafoor6309 4 ปีที่แล้ว

    Very good explanation with clearly mentioning all required details. Thank you ...

  • @sangnguyennhat7795
    @sangnguyennhat7795 4 ปีที่แล้ว

    Thank you, your lession is short but I think its sufficient and easy to understand.

  • @iamdedlok
    @iamdedlok 3 ปีที่แล้ว +1

    Awesome summary and diagrams! Very nicely done, this was very helpful! Subscribed! Looking forward to more video from you :D

  • @jerweiyeoh7096
    @jerweiyeoh7096 3 ปีที่แล้ว

    4:06, the "AHA!" moment
    Appreciate it and keep up the good work!

  • @WhatShallMyUsernameBe
    @WhatShallMyUsernameBe 2 หลายเดือนก่อน

    Hi,
    I signed in just to say
    Thank you very much for explaining this to me. Your video finally helped it click for me.

  • @kesh2032
    @kesh2032 4 ปีที่แล้ว +4

    This is fantastic! The best explanation on youtube !

  • @9thplayer
    @9thplayer 4 ปีที่แล้ว

    You know what? You are the best. Remember my words. You have explained the best way coulb be possible in this universe. I would love to see more videos on security side.

  • @PedroMatosMAC
    @PedroMatosMAC 4 ปีที่แล้ว +1

    Thank you so much for this GREAT video. Finally understood how it all works. PLEASE make more videos like this because you really know how to explain things.

    • @kubucation
      @kubucation  4 ปีที่แล้ว

      Thanks! Do you have any suggestions of complex topics you'd like to have explained?

  • @TheFentonz
    @TheFentonz 2 ปีที่แล้ว

    This is great! No messing around, no bullshit, straight to the point!

  • @AnupWarrier
    @AnupWarrier 3 ปีที่แล้ว

    Clear and crisp explanation. Very well done!

  • @CSSoda
    @CSSoda 3 ปีที่แล้ว

    This is one of the best explanations about Asymmetrical Encryption and How HTTPS works! Thanks

  • @siteshp
    @siteshp 4 ปีที่แล้ว +3

    One of the best videos on working of HTTPS. Great work @Kubucation.

  • @Stockholmray
    @Stockholmray 3 ปีที่แล้ว +1

    Here is an uncluttered easy to follow overview of public-private key-pairs and Certificate Authorities. Many educational resources fail to deliver a simple overview of this most basic of subjects. Thank you!

  • @jimmytsai8069
    @jimmytsai8069 4 ปีที่แล้ว +8

    Dude, this is brilliant. Just subscribed to your channel. thanks for the great work!

    • @kubucation
      @kubucation  4 ปีที่แล้ว

      Thanks for the sub and your nice words.

  • @georgematua
    @georgematua 2 ปีที่แล้ว +2

    Perfect! What I have been missing everywhere is part 03:39 where it basically says that "only private key owner (the one who created the public key) can decrypt information encrypted with this very public key". I did not understand how the public key is not compromised when sent in first place. Thanks!

  • @peterndehi2757
    @peterndehi2757 3 ปีที่แล้ว

    Thanks for this. Simple, on point. Just what I needed

  • @user-yo1ex9bq1p
    @user-yo1ex9bq1p ปีที่แล้ว

    Thank you so much for the clear explanation with the excellent diagrams!

  • @manojulhe2211
    @manojulhe2211 4 ปีที่แล้ว +1

    Best video for understanding the SSL, Thanks!

  • @henderstech
    @henderstech ปีที่แล้ว

    Thank you for this. I am still struggling to understand but this video helped more than anything I have seen.

  • @david2358
    @david2358 2 ปีที่แล้ว

    So far the best HTTPS video i have seen!

  • @akashkarmakar4971
    @akashkarmakar4971 ปีที่แล้ว

    Awesome man!! I have very rarely seen such a concise and effective video.

  • @python1419
    @python1419 11 หลายเดือนก่อน

    Good Job! Your explanation is incredibly clear and straight to point. Thank You for this overview. 👍

  • @anandyelchatwar3935
    @anandyelchatwar3935 3 ปีที่แล้ว

    This video has helped me a lot in understanding how the HTTPS works , Thanks for explaining so clearly . Just Perfect :)

  • @udohpele1696
    @udohpele1696 4 ปีที่แล้ว +3

    bro... this was a fantastic explanation. Kudos to you. Thanks man.

  • @SatyakiSanyals
    @SatyakiSanyals 4 ปีที่แล้ว

    I was hooked up to this video after you explaIned the Pre-Requisites. Thank you

  • @PiyushDangreIndia
    @PiyushDangreIndia 3 ปีที่แล้ว

    This is amazing ! Cleared my long pending doubts. Thank you ! :)

  • @learnchinesewithyanhuaandk8903
    @learnchinesewithyanhuaandk8903 2 ปีที่แล้ว

    Complicated theories made easy. Brilliant! Thanks for the help!

  • @gmelodie
    @gmelodie 4 ปีที่แล้ว +3

    Amazing, simple and objective video. Ty so much!

  • @Woodywoodah
    @Woodywoodah ปีที่แล้ว

    This has to be one of the best https explanations on TH-cam

  • @tcloudcorner
    @tcloudcorner ปีที่แล้ว

    This video 100% clarified my perception on HTTPS

  • @clayjensen1542
    @clayjensen1542 2 ปีที่แล้ว

    Best video on this topic, you explained it so well, thanks

  • @devart321
    @devart321 3 ปีที่แล้ว

    This is the best video which explained SSL so well ...Thank you:)

  • @JulioEcheverry
    @JulioEcheverry 2 ปีที่แล้ว

    Oh wow this was such a beautifully crafted explanation, thank you so much Kubucation

  • @TommyBoy7Heads
    @TommyBoy7Heads 2 ปีที่แล้ว

    This was such a good explanation. Thanks for completely eradicating a blind spot for me.

  • @Benjo1102
    @Benjo1102 4 ปีที่แล้ว +4

    Somebody has earned himself a subscription from an unknown stranger from the internet. Nice work.

  • @grahamjoss4643
    @grahamjoss4643 4 ปีที่แล้ว +3

    Keep spreading the love !

  • @sweetsubha2020
    @sweetsubha2020 2 ปีที่แล้ว +1

    Great video,.. Finally i could get a clear picture of how HTTPS works,...

  • @sivapathikarunanithi9400
    @sivapathikarunanithi9400 4 ปีที่แล้ว +3

    This is gold. Thank you for this :)

  • @danielwarzecha2007
    @danielwarzecha2007 5 หลายเดือนก่อน +1

    This is the first video that clicked. Thanks

  • @starmole5000
    @starmole5000 3 ปีที่แล้ว

    This is absolutely superb. Very little knowledge assumed. Super clear.
    Thanks

  • @namdeoamit
    @namdeoamit 4 ปีที่แล้ว

    Awesome Video and explanation. I was looking to clarify few basic things which I could not in many other similar video by others. Thanks a lot for it.

  • @dilin85
    @dilin85 4 ปีที่แล้ว +2

    This was really awesome. Nicely explained and easy to comprehend. Hope to see more from you. Stay safe and blessed.

  • @silentspectator8655
    @silentspectator8655 2 ปีที่แล้ว

    I've been trying to set up PKI on a private network for a month and always walked away from other resources with more questions without really being much closer to the answer, which was super frustrating. This is the most straight forward explanation on this that I've seen. Huge +1 for taking the time to explain the self-signed cert process and going into detail about the relationships between browser, server and CA.
    Frustrating when a majority of what you find online is geared towards sites that are on the internet only with no consideration for intranets.