TLS Handshake - EVERYTHING that happens when you visit an HTTPS website

TLS (formerly SSL) is the protocol that makes it safe to do anything on the Internet. It's the protocol that enables that little padlock which gives you the green light to put in your password or bank account number. In order to get the padlock, however, something has to occur between you and the website you are visiting... that something is known as the TLS handshake.

The TLS handshake validates the two endpoints in the conversation, and exchanges the cryptographic material used to create Session keys which will then protect the web browsing session with Encryption, Integrity, and Authentication.

In this video, I'll show you every step of the handshake, what the client knows, what the server knows, and everything they exchange and learn from what is sent across the wire. I'll show you how they create each key involved in securing internet communication.

To be clear, this Handshake also occurs every time you use an SSL VPN as well, and as time goes on, will be used anytime _any_ communication occurs over a computer network.

00:00 - Teaser / Intro
00:40 - TLS Handshake - Background Information
02:25 - Client and Server - the starting point
03:12 - Client Hello - Version, Random Number, Session ID, Ciphers, Extensions
05:16 - Server Hello - Version, Random Number, Session ID, Ciphers, Extensions
07:58 - Server Certificate - Full Certificate Chain
08:38 - Server Hello Done
09:11 - Client Key Exchange - RSA Key Exchange
11:36 - Pre Master Secret, Master Secret, Session Keys
13:56 - SSL/TLS Create TWO secure tunnels
15:53 - PseudoRandom Function (PRF)
17:38 - Do the Client & Server know they have the right keys?
18:22 - Change Cipher Spec (from Client)
18:56 - Client Finished
21:42 - Server Finished & Change Cipher Spec
24:17 - Sharing Protected Application Data
25:04 - Outro & Summary
26:13 - TLS 1.3 Changes Everything... Practical TLS Discount

🔑 More free lessons from the course:

🔐 More details about the course:

🏢 Do you configure or troubleshoot TLS/SSL for work? If so, I'm willing to bet your employer would happily pay for this SSL training. Reach out if you'd like to coordinate an introduction for a bulk license purchase with your company. I'm happy to provide a generous referral bonus =)

💬 Join Practical Networking Discord

#ssl #tls #cybersecurity

[PracticalNetworking]

💲 *Coupon Code* for 50% off: youtube50

[AliYahyaabadi]

I wanted to take a moment to thank you for your incredibly helpful tutorial on TLS/SSL. I'm so grateful that you took the time to create such a detailed and informative resource.

[chiefriver]

Thanks for all your quick responses here and on Twitter! Until I buy a class just wanted to say thanks as you are great at fulfilling your mission of bridging the gap between overly technical documentation, RFCs etc and simplified examples that leave us with more questions than answer!!!

Keep it going and thanks again!!

[KannanBalasubramanian-yx]

One of the absolute best training videos I've watched in the recent past! The author seems to have an impressive understanding of the audience new to the topic. Pacing of the video is spot-on for me, making the learning experience truly captivating

[umairsafdar]

One of the best and highly detailed explanations of TLS Handshake.
Thanks for putting this out for free !!

[alirezajalali]

after all these years in IT, now I fully understand TLS . thank you so much

[scottspa]

As someone lucky enough to have won access to the full TLS course, I have to agree that there is enough detailed content in it to answer any questions a person may have after watching this. Excellent course! Definitely worth the cost! 👍 Really, really looking forward to 1.3 with quic.

[ivanshmilyk]

I kept struggling with those 5-6 min long videos on TLS/SSL handshake and was sure I needed to find a longer all-in-one video, and yours is really by far the best explanation here, thank you, I hope YouTube's algorithm will recommend this to more people who search on this topic

[KrishnaChrist]

Hey someone, can you please come back & remove your 'single' DISLIKE from this video please.

This insightful video doesn't deserve dislike at all.

[the-sunny-side-up]

The most precise explanation of TLS handshake, I have ever found!! Thanks for making my life easy.

[jerrygowen]

THANK YOU!!! so many different videos separate everything and its hard to really understand the whole topic and how it fits together. Thank you for doing what nobody else does

[ankitsharma-efcs]

OMG !!
What an explanation Ed.
This is the best content for TLS-Handshake and i'm so glad to find.
Lots of love from INDIA
💌

[DG-fspq]

I finally purchased your Practical TLS class last night. Ready!!!

[AbhishekD]

Really appreciate all the work you do! This was very helpful, clear and detailed at the right level of abstraction. Thank you. 🙏

[justsomebody]

This is a gem! Thanks for your free course!

[TechChefMM]

Simply and ABSOLUTELY fantastic content! I’m sold and now a paid course subscribed student looking forward to consuming ALL the content and putting it to practical use! Kudos! MM

[ericschneider]

OMG! Thank you so much!!! This was EXACTLY the video I needed to understand what was missing, and I was looking for it so badly! Best explanation ever!

[amzathblaiseyehouessi]

I hit the LIKE button 6 times to give you tha round of applause. You actually deserve it more than me. Thank you!

[jhde]

I'm glad I subscribed to the channel after finding the website.

[infomoreandmore]

This is the best explanation so far I got around SSL handshake. Thanks a lot!