Advanced TLS and HTTPS course for everyone! Set up a HTTPS localhost server with Node and Live Server. Tons MORE!

What you'll learn

Create your own localhost server (Node and Live Server) that runs over HTTPS / TLS

Join the ranks of elite developers who truly understand how TLS protects data in transit

Understand HTTPS by creating your own Certificate Authority and signing certificates

Gain a deep understanding of pure HTTPS and TLS

Understand hybrid key exchange concepts that are used TODAY with TLS 1.3

Learn encryption, hashing, HMACs and PIKs with respect to HTTPS

Master the concepts of HTTPS and TLS

Learn more than 99% of developers who think HTTPS is just "secure"!

Understand how TLS works, visually

Generate your own self-signed PIK certificates and sign for your server FOR FREE

Understand concepts of asymmetric and symmetric encryption

Understand the role of "public" and "private" keys in HTTPS

Become a developer grandmaster

Dive deep into the mechanics of TLS handshakes and understand how secure connections are forged!

Hands-on experience in setting up HTTPS on locahost using Live Server (VSC) using Node

Equip yourself with the skills to implement robust security measures in your web applications!

Become a trusted developer by mastering the principles of encryption, authentication, and data integrity!

Visualize TLS, PKI, HTTPS and more!

Understand how to use OpenSSL and .cnf files to supply configurations to your certificates and keys

How to extract the public key from a private key

Understand why the private key often looks like the public key

Understand PEM files, ASN.1 files and PCKS#1 files

Learn the latest hybrid key exchange techniques used by latest browsers in TLS 1.3

Understand the TLS 1.3 handshake process

Requirements

No programming experience necessary, although a basic understanding of HTTP will be helpful

Mac or PC, so you can code alongside with me

Description

Deep dive into TLS (previously called SSL) and HTTPS: Gain insights that set you apart from 99% of developers. Understand the true meaning of HTTPS beyond the surface-level claims of "security"The end of HTTP/1.1: Any serious developer today must concentrate on TLS security and hosting websites over the more robust protocols like HTTP/2 and HTTP/3. Stay relevant in a rapidly evolving digital landscapeKey Concepts Unlocked: Explore advanced topics such as hybrid key exchange, encryption, public key infrastructure (PIK), asymmetric and symmetric cryptography, TLS handshake, HMAC, signatures, hashing, and cipher suites. Each concept builds a solid foundation for your web security knowledge.This course is meticulously crafted for developers who are eager to elevate their TLS skills and gain a profound understanding of HTTPS, Certificate Authorities, and secure server configurations.SSL is old-school, outdated and deprecated. Therefore this course focuses on TLS as the protocol used with HTTP/2 and HTTP/3. What You'll Learn:Throughout this course, you will embark on an adventure that seamlessly blends theory with hands-on practice. Here's what you can expect:Practical HTTPS setup: You are going to learn how to use Node.js, and Live Server to set up a localhost server over a secure TLS / HTTPS connection. You will master the process of creating certificates and generating keys.Encryption: Understand the principles of encryption, including both symmetric and asymmetric methods, the concept of "keys" and how they are applied in secure HTTPS communications.TLS Handshake Mechanics: Dive deep into the TLS handshake process, learning how secure connections are established between clients and servers.Public Key Infrastructure: Learn about the framework that enables secure data exchange through digital certificates and key management.Advanced TLS Concepts and Cryptography: Gain insights into Hybrid Key Exchange (KEM algos), HMAC, signatures, hashing techniques, and cipher suites that form the backbone of secure TLS web interactions.This Course Is Practical: You'll put theory into action by setting up your own secure local server using HTTPS through the following steps:Create Your Own Certificate Authority (CA): Learn how to set up a CA from scratch, giving you the authority to issue certificates for your projects.Self-Sign Your CA Certificate: Discover how to self-sign your CA certificate, making it uniquely yours and ready for deployment.Generate Keys for Security: Master the process of generating private and public keys for your server.Request a Signed Certificate: Complete the setup by learning how to request a signed certificate, finalizing your secure server configuration.Sign Your Server's Certificate: Use your newly created CA to sign your server's certificate, ensuring secure communication for your local applications.Hands-On Experience:In this course you will spin up a localhost server (running on 127.0.0.1) over HTTPS using:Live Server in Visual Studio Code (we do this using a GUI and also OpenSSL)A Node server instance, using the mkcert library (I'll show you how to do this using the API and also the CLI)Additionally, you'll analyze traffic for both HTTP/2 and HTTP/3, gaining insights into modern web communication protocols. This course is not just about learning; it's about doing!Don't Miss Out on Essential Skills!In today's fast-paced tech landscape, mastering TLS and web security is no longer optional—it's essential. Every serious developer must be equipped with these skills to thrive in a competitive environment. The time to act is now! Equip yourself with the knowledge that will set you apart and position you as a leader in web development.This is your chance to step confidently into the future of web security with our comprehensive course on Transport Layer Security (TLS).So . what are you waiting for? Let's get crackin'

Overview

Section 1: Introduction to http, https, and encryption keys

Lecture 1 Introduction to HTTP

Lecture 2 Analyze HTTP/1.1 traffic using Wireshark

Lecture 3 How to capture encrypted HTTPS traffic over HTTP/3

Lecture 4 What is encryption

Lecture 5 Symmetric key encryption

Lecture 6 Asymmetric key encryption

Lecture 7 Analyzing QUIC and HTTP/3 traffic in Wireshark, and extracting session keys

Lecture 8 What encryption algorithms does OpenSSL provide?

Section 2: TLS deep dive and the role of PKI

Lecture 9 Goals of TLS and HTTPS

Lecture 10 Asymmetric key encryption guarantees confidentiality

Lecture 11 Ultimate goal for HTTPS is for client and server to use symmetric key encryption

Lecture 12 Premaster and master secrets, RSA and symmetric key generation

Lecture 13 Using asymmetric keys to produce signatures

Lecture 14 Intro to hashing using Bash terminal and utilities

Lecture 15 Hashing ensures integrity of data

Lecture 16 Combining hashing with key encryption

Lecture 17 Into to HMAC (Hash-based Message Authentication Code)

Lecture 18 Why a Public Key Infrastructure (PKI) system is needed

Lecture 19 Public Key Infrastructure (PKI) and Certificate Authorities (CA) explained

Lecture 20 How does a server request a certificate - Certificate Signing Request (CSR)

Lecture 21 Certificate Signing Request (CSR)

Lecture 22 How to view trusted CA's on your browser and operating system

Lecture 23 How does a client verify a server's signed certificate?

Lecture 24 What does the client actually check on the certificate?

Lecture 25 TLS process recap: part 1 of 2 (client hello and server hello)

Lecture 26 Timeout: using Wireshark to examine the client hello and server hello

Lecture 27 TCP Streams vs. HTTP/3 Streams

Lecture 28 Timeout - quantum computers have necessitated more complex algos

Lecture 29 Summary of the hybrid key exchange mechanism in TLS 1.3

Lecture 30 TLS process recap: part 2 of 2 (premaster and master secret, and symmetric keys)

Section 3: Create your own HTTPS server (PRACTICAL)

Lecture 31 Intro to .pem | ACN.1 | PKCS | .crt | .csr and steps required to establish TLS

Lecture 32 CA, and certificate generation process, VISUALIZED

Lecture 33 Part 1: Using XCA and Live Server to spin up a localhost server over HTTPS/TLS

Lecture 34 XCA - creating a local CA, and a self-signed certificate

Lecture 35 XCA - creating keys, a CSR and a signed X.509 certificate for localhost

Lecture 36 XCA - run a localhost server using Live Server, over HTTPS/TLS

Lecture 37 XCA - Using Wireshark to examine our TLS connection

Lecture 38 Part 2: Using OpenSSL and Live Server to run a localhost server over HTTPS/TLS

Lecture 39 OpenSSL - installing OpenSSL

Lecture 40 OpenSSL - producing CA keys and certificate

Lecture 41 Inspecting the private key file, and extracting the public key from it

Lecture 42 OpenSSL - generating server key pairs, and a server CSR file

Lecture 43 OpenSSL - generating a signed certificate certificate by our CA

Lecture 44 OpenSSL - run a localhost server using Live Server, over HTTPS/TLS

Lecture 45 Part 3: Create a Node server to run a localhost server over HTTPS and TLS

Lecture 46 Node - setting up our Node server code

Lecture 47 Node - using the mkcert API to run a Node localhost server over HTTPS/TLS

Lecture 48 Node - using the mkcert CLI to run a Node localhost server over HTTPS/TLS

Lecture 49 Outro

Aspiring web developers looking to host their own HTTPS server with self-signed certificates,Developers who want to demystify TLS and HTTPS and understand its real-world applications,Professionals who want to learn more than 99% of developers who think HTTPS is just "secure" without understanding why!,Curious minds ready to explore HTTP/2 and HTTP/3,Anyone interested in becoming a confident advocate for web security in their organization!,Developers eager to master Public Key Infrastructure (PKI) and secure their applications with encryption!