From d32087ec2586dff18b8305846cf3e4549deb655e Mon Sep 17 00:00:00 2001 From: Ward Wouts Date: Tue, 25 Feb 2020 14:52:35 +0100 Subject: [PATCH] bigger signing pictures --- index.html | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/index.html b/index.html index 6b6e954..6cb46a4 100644 --- a/index.html +++ b/index.html @@ -189,14 +189,15 @@ layout: false SSL/TLS historically has two main purposes: - Protecting traffic using encryption. Both its confidentiality as its integrity. - Identifying the other side. This was what the lock in the browser URL bar used to be for, until it didn't make sense anymore. - +] +??? Now, on a network you know and control completely there is no need for something like SSL/TLS. TCP can detect broken packets perfectly fine, so integrity is taken care of. There is no one snooping, because you are in control of the network. No one else has access, and you already know what systems you are talking to: your own. Such a network does not exist. - Snooping can easily be done by any network operator using listener ports on network equipment. - Traffic can be changed or diverted using a so called Man in the Middle attack -] + --- template: inverse # Man in the Middle (MitM) @@ -254,9 +255,10 @@ show certificate ] .right-column[ So, how does a certificate get signed? +] -] + ??? Or how does this signing work: @@ -270,9 +272,9 @@ Or how does this signing work: ] .right-column[ Now anyone can verify the signature: +] -] ??? Now anyone can verify the signature by: