The Complete SSL and TLS Guide: HTTP to HTTPS from Udemy

What's inside

Learning objectives

Learn how to install ssl/tls certificate on the web server
What is the difference between http and https
What is ca (certificate authority) and how chain of trust is built
How tls certificate is structured (subject name, issuer name, validity period, signature etc.)

Let's encrypt free certificates that are valid 90 days. certbot acme client for automatic certificate issuing and renewal
Cloudflare reverse proxy with free ssl certificates
Csr (certificate signing request), domain validation and certificate installation
Install and configure nginx web server for ssl/tls encryption

Learn how to install ssl/tls certificate on the web server
What is the difference between http and https
What is ca (certificate authority) and how chain of trust is built
How tls certificate is structured (subject name, issuer name, validity period, signature etc.)
Let's encrypt free certificates that are valid 90 days. certbot acme client for automatic certificate issuing and renewal
Cloudflare reverse proxy with free ssl certificates
Csr (certificate signing request), domain validation and certificate installation
Install and configure nginx web server for ssl/tls encryption

Syllabus

Course Introduction

Intro

Let's get connected! Join the Learning Community

Introduction to the HTTPS and TLS

In this section I'll explain the difference between HTTP and HTTPS and importance of usage of HTTPS.

Overview of researches dedicated to SSL, TLS and HTTPS

Overview of the certificates of some popular websites

Difference between HTTP and HTTPS

Analyzing traffic using Wireshark

TCP/IP stack by example

Analyzing HTTP protocol using Wireshark

Analyzing HTTPS and TLS using Wireshark

Encryption and hashing overview

Section 2 Introduction

Symmetric Key Encryption

Symmetric Key Encryption Algorithms

Hashing Overview

MD5 hashing algorithm

SHA hashing algorithm and HMAC overview

Asymmetric keys overview

Encryption using asymmetric keys

Signing data using assymmetric keys

RSA Overview

PKI - Public Key Infrastructure Overview

Certificate overview

RSA, Certificates and Chain of Trust

Section 3 Introduction

Installing OpenSSL

Using OpenSSL for RSA keys generation

Exploring certificate of Instagram

Exploring certificate of Google

Exploring certificate of Comodo

Root CA and root certificates in the OS

How Chain of Trust is built

Verifying chain of certificates

Verifying SSL certificate and certificates chain

PKI, Chain of trust and certificates summary

Certificate domain scopes

SSL, TLS and HTTPS

Section 4 Introduction

Introduction to the SSL and TLS

History and versions of the SSL and TLS

Why RSA is not used for data encryption in HTTPS

How TLS session is established

Analyzing TLS session setup using Wireshark

Overview of cipher suites

Encryption key generation by the web browser

Delivering encryption key using Diffie Hellman key exchange

Diffie Hellman overview

Modulus operation

Diffie Hellman algorithm

Elliptic Curve Cryptography Overview

Point Addition on Elliptic Curve

Multiple Point Addition

Point Doubling and Optimization

Elliptic Curve Discrete Log Problem

Comparing formulas

ECDHE - Elliptic Curve Diffie Hellman Exchange

Exploring ECDHE with ECDSA

Launching TLS secured website with free domain and hosting

Section 5 Introduction

Free domains overview

Setting up free domain and hosting using GitHub Pages

Exploring TLS session with our website at Github.io - PART 1

Exploring TLS session with our website at Github.io - PART 2

Custom domain with free hosting

Section 6 Introduction

Planning next steps with Paid Domain

Buying a domain

Setting up free hosting

Overview of the TLS settings at the free hosting

OPTIONAL - Trying to install free Let's Encrypt TLS certificate on free hosting

Free TLS certificate (Let's Encrypt) at paid hosting

Section 7 Introduction

VPS vs Dedicated Server

Hosting Services Overview - PART 1

Hosting Services Overview - PART 2

Buying a droplet at DigitalOcean

Launching Wordpress website with HTTPS

Exploring our brand new TLS Certificate

Finishing Wordpress installation

Let's Encrypt and Certbot Overview

Exploring TLS certificates via shell

Exploring certbot configuration and testing renewal

What we have got so far

Cloudflare with free TLS certificate

Section 8 Introduction

Reverse Proxy and Cloudflare

Overview of the current setup

Moving our website to Cloudflare

Exploring free TLS certificate from Cloudflare

Exploring TLS settings at Cloudflare

Cloudflare SSL Operation Modes

Flexible SSL Operation Mode at Cloudflare

Off SSL Operation Mode at Cloudflare

Configuring NGINX web server and installing TLS certificate

Section 9 Introduction

Current Setup and planning next steps

Installing Nginx web server

Configuring Nginx web server

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Teaches a multitude of skills relevant to securing websites with the HTTPS and TLS protocols

Provides real-world examples and hands-on exercises for learners to practice their skills in a live setting

Offers a comprehensive study of the various components of SSL/TLS certificates, including their structure, purpose, and application

Begins with fundamental encryption algorithms and networking concepts, ensuring a strong foundation for beginners

May require basic computer networking and encryption knowledge, which some learners may need to acquire prior to taking this course

Focuses primarily on securing websites, so learners interested in securing other types of applications or systems may need to supplement their knowledge

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in The Complete SSL and TLS Guide: HTTP to HTTPS with these activities:

Learn asymmetric encryption

Show steps

You should refresh your knowledge on the fundamentals of asymmetric encryption in preparation for sections 2 and 4 of this course.

Browse courses on Asymmetric Encryption

Show steps

Review the basics of asymmetric encryption algorithms
Practice encrypting and decrypting messages using an asymmetric key pair

Follow a tutorial on how to use Let's Encrypt to obtain a free SSL certificate

Show steps

To gain practical experience obtaining and using SSL certificates, you should follow a tutorial on how to use Let's Encrypt to get a free SSL certificate.

Browse courses on Let's Encrypt

Show steps

Find a tutorial on how to use Let's Encrypt
Follow the tutorial to obtain a free SSL certificate from Let's Encrypt

Review the book 'SSL and TLS Demystified' by Stephen Thomas

Show steps

To gain a deeper understanding of the concepts covered in this course, you should review the book 'SSL and TLS Demystified' by Stephen Thomas.

View Melania on Amazon

Show steps

Read the book 'SSL and TLS Demystified'

Five other activities

Expand to see all activities and additional details

Show all eight activities

Compile a list of resources on SSL certificates and web security

Show steps

To expand your knowledge and understanding of SSL certificates and web security, you should gather resources in the field.

Browse courses on SSL Certificates

Show steps

Search for resources on SSL certificates and web security
Compile a list of these resources

Practice installing and configuring SSL certificates on a web server

Show steps

To reinforce your understanding of how to configure and install SSL certificates, you should practice these skills using a real-world scenario.

Browse courses on Web Server Configuration

Show steps

Choose a web hosting provider and domain name
Install a web server on your chosen hosting provider
Generate a CSR (Certificate Signing Request)
Obtain an SSL certificate from a CA (Certificate Authority)
Install the SSL certificate on your web server

Participate in a workshop on SSL certificate management

Show steps

To deepen your understanding of SSL certificate management, you should participate in a workshop on this topic.

Browse courses on Web Security

Show steps

Find a workshop on SSL certificate management
Attend the workshop and participate actively

Attend a local meetup or conference on web security

Show steps

To connect with other professionals in the field and learn about the latest trends in web security, you should attend a local meetup or conference.

Browse courses on Web Security

Show steps

Find a local meetup or conference on web security
Attend the meetup or conference

Create a blog post or article on the benefits of using SSL certificates

Show steps

By creating a blog post or article, you will demonstrate your understanding of the importance of SSL certificates and how they can be used to improve website security.

Browse courses on SSL Certificates

Show steps

Research the benefits of using SSL certificates
Write a blog post or article that explains these benefits and provides examples of how SSL certificates can be used to improve website security
Publish your blog post or article on a website or blog

Career center

Learners who complete The Complete SSL and TLS Guide: HTTP to HTTPS will develop knowledge and skills that may be useful to these careers:

Information Security Analyst

The Complete SSL and TLS Guide: HTTP to HTTPS may be of great use to Information Security Analysts because of its deep dives into encryption, hashing algorithms, symmetric key encryption algorithms, public key infrastructure, Diffie-Hellman key exchange, and elliptic curve cryptography.

See salaries and explore the career path for Information Security Analyst

Network Security Engineer

Network Security Engineers who are looking to strengthen their expertise in SSL/TLS encryption may find value in taking The Complete SSL and TLS Guide: HTTP to HTTPS. The course offers a deep dive into the technical aspects of SSL/TLS, including certificate authority and chain of trust, which are essential for securing network communications.

See salaries and explore the career path for Network Security Engineer

Systems Administrator

Systems Administrators will find The Complete SSL and TLS Guide: HTTP to HTTPS immediately useful on the job because the course uses common tools such as Wireshark and OpenSSL. Additionally, the hands-on exercises and real-world scenarios will help IT professionals gain confidence in their ability to implement and manage secure web infrastructure.

See salaries and explore the career path for Systems Administrator

Security Architect

Security Architects will likely find value in the advanced topics covered in The Complete SSL and TLS Guide: HTTP to HTTPS, including Diffie-Hellman key exchange and elliptic curve cryptography. The course also covers tools like Wireshark that are often used by professionals in this role for troubleshooting and problem-solving.

See salaries and explore the career path for Security Architect

Cybersecurity Analyst

The course may assist Cybersecurity Analysts with a more in-depth understanding of digital certificates, as well as the practical setup and configuration of SSL/TLS certificates on web servers.

See salaries and explore the career path for Cybersecurity Analyst

Software Engineer

Software Engineers who work on web development, especially those who work on the back-end, may find The Complete SSL and TLS Guide: HTTP to HTTPS to be helpful for understanding how to set up secure web infrastructure for software applications. These topics are critical for protecting user data and ensuring the integrity of online transactions.

See salaries and explore the career path for Software Engineer

Network Engineer

Network Engineers who wish to use The Complete SSL and TLS Guide: HTTP to HTTPS to advance their career may find the course's deep dive into encryption, hashing algorithms, and computer networks especially helpful. The hands-on nature of the course can help students learn to solve complex problems.

See salaries and explore the career path for Network Engineer

Web Developer

Prospective Web Developers that take the The Complete SSL and TLS Guide: HTTP to HTTPS course may be able to use the knowledge from the course on the job to more effectively troubleshoot and diagnose problems with SSL/TLS certificates, especially with the help of Wireshark. They may also be able to provide assistance on implementing more secure web infrastructure by providing guidance on purchasing domains, setting up DNS settings, and obtaining free TLS certificates.

See salaries and explore the career path for Web Developer

IT Auditor

IT Auditors will find value in The Complete SSL and TLS Guide: HTTP to HTTPS because it comprehensively covers security-related topics like encryption, hashing algorithms, and TLS, which are all important for ensuring the security of information systems.

See salaries and explore the career path for IT Auditor

DevOps Engineer

DevOps Engineers will be able to use the skills they learn in The Complete SSL and TLS Guide: HTTP to HTTPS to help make their software development processes more secure, both during development and deployment. With nearly 30 practice exercises, including working with real domains and web hosting, DevOps Engineers can work on the skills they'll need to use immediately on the job.

See salaries and explore the career path for DevOps Engineer

IT Manager

IT Managers who want to gain valuable knowledge about SSL/TLS encryption to make informed decisions for their organization may find The Complete SSL and TLS Guide: HTTP to HTTPS helpful in broadening their understanding of the subject and its application in securing web-based systems.

See salaries and explore the career path for IT Manager

Cloud Engineer

Cloud Engineers may find some value in the content of The Complete SSL and TLS Guide: HTTP to HTTPS that focuses on installing and configuring Nginx for SSL/TLS encryption. This content may help Cloud Engineers better understand the security implications of their work and how to build more secure cloud-based applications and infrastructure.

See salaries and explore the career path for Cloud Engineer

Database Administrator

The Complete SSL and TLS Guide: HTTP to HTTPS may be useful to Database Administrators looking to bolster their knowledge of encryption and security, with specific emphasis on algorithms like MD5, SHA, and RSA. The course also includes a section on installing and configuring Nginx, which is a popular web server used by many organizations.

See salaries and explore the career path for Database Administrator

Technical Support Specialist

Technical Support Specialists who are responsible for providing support for web-based applications may find The Complete SSL and TLS Guide: HTTP to HTTPS useful for understanding how to troubleshoot and resolve issues related to SSL/TLS certificates and encryption.

See salaries and explore the career path for Technical Support Specialist

Data Scientist

The discussion of hashing algorithms and encryption, as well as the hands-on exercises using OpenSSL and Wireshark, may be useful to Data Scientists working with sensitive data or building machine learning models that require strong security.

See salaries and explore the career path for Data Scientist