Transport Layer Security (TLS)

Transport Layer Security (TLS) - Computerphile

Рет қаралды 470,364

Күн бұрын

It's absolutely everywhere, but what is TLS and where did it come from? Dr Mike Pound explains the background behind this ubiquitous Internet security protocol.
Heartbleed, Running the Code: • Heartbleed, Running th...
Secure Web Browsing: • Secure Web Browsing - ...
Network Stacks & The Internet: • Network Stacks and the...
/ computerphile
/ computer_phile
This video was filmed and edited by Sean Riley.
Computer Science at the University of Nottingham: bit.ly/nottscomputer
Computerphile is a sister project to Brady Haran's Numberphile. More at www.bradyharan.com

Пікірлер: 289

@cody7888 3 жыл бұрын

I’m a simple man... I see Dr. Mike Pound, I click

@allwhatyouwant 3 жыл бұрын

Try that in real life

@PeteMcDonald 3 жыл бұрын

@Peter Lustig We're not gonna feed you here, buddy.

@umka7536 3 жыл бұрын

Mike is my favorite expert on Computerphile. The way he explains things about security is very clear, but also has some useful historical facts.

@alext9558 7 ай бұрын

that's the trait of the smartest and impassioned teachers. They're able to get your attention with the toughest topics.

@rashidxd 3 жыл бұрын

looks like Alice and Bob are in quarantine like the rest of us :)

@eobardthawne6903 3 жыл бұрын

@@AWES0MEDEFENDER it was actually the first one that got so much hype lol

@realshaoran4514 3 жыл бұрын

Poor Alice and Bob, now they can't communicate with each other.

@nirui.o 3 жыл бұрын

@@realshaoran4514 Oh they still can, if they yell really really loud in their room just like my actual neighbors. The only problem is my neighbors knows nothing about TLS.

@ikeralfonso2047 2 жыл бұрын

i dont mean to be so offtopic but does anybody know a tool to log back into an Instagram account?? I stupidly forgot the login password. I would love any tips you can give me

@byronharlem7238 2 жыл бұрын

@Iker Alfonso instablaster :)

@psteknyo 3 жыл бұрын

Please do a video on Macromedia Flash - How it worked, how it affected Internet culture and why it's being deprecated.

@MrKarma4ya 3 жыл бұрын

Great Idea!

@miran248 3 жыл бұрын

It started as an alternative (replacement) to gif and as such it had actual frames (12 frames at 12fps would be 1s in length) which were loaded progressively. This means that once actionscript was introduced you could execute the code (show preloaders; play sounds, animations, ..) before the app was fully loaded(!) - that's one of the things i loved about flash and still miss in today's tech. Instead of hundreds of requests that we do today, there were only a few in flash - webassembly might change that.

@RichardBuckerCodes 3 жыл бұрын

I think Microsoft announced that they have permanently removed flash with the latest version of Win10/

@Acorn_Anomaly 3 жыл бұрын

@@RichardBuckerCodes Their built-in version, anyway, that I believe was used for Edge. You can still install it yourself, if you want to for some reason. Google will be removing Flash from Chrome in December.

@Divv 3 жыл бұрын

It was deprecated because browsers started to support video natively with HTML5. Steve Jobs answers this brilliantly on a All Things Digital interview done some years ago.

@lawrencedoliveiro9104 3 жыл бұрын

5:47 If you think about it, the OSI seven-layer model included a “presentation” layer, between “transport” and “application”, that nobody could fit into the reality of TCP/IP very well. But SSL/TLS fills that layer very nicely.

@ywanhk9895 3 жыл бұрын

we are actually using TLS to learn TLS if you think about it

@signalworks 3 жыл бұрын

Same thing for tutorials about anything relating to technology though - JavaScript, html, databases, RF engineering, photolithography, power infrastructure, just to name a few

@h-0058 3 жыл бұрын

@@signalworks You could even say something similar when you learn anything. You are using something to learn how to use that thing For example, you use math to learn how math works

@signalworks 3 жыл бұрын

@@h-0058 I think there's a slight difference between the use of the word "use" - building on basics to learn deeper concepts is one thing, but having the knowledge delivered to you by application of the knowledge itself is another.

@Mathijs303 3 жыл бұрын

Dr Mike Pound is my favorite scientist on Computerphile. Also IMHO the best teacher in this domain on KZfaq.

@misophoniq 3 жыл бұрын

Ah, yes... the 90s. Great computer times. We had hubs instead of routers. Blasting all the data to all the port, hoping that only the intended recipient would actually grab it. Or token-ring networks, even worse. With the right tools, you could just grab all the data that was intended for other users in the network, like chats, visited websites, video stream. Fun times...

@kaisergurdeep 3 жыл бұрын

🤣 LOL ah fun times

@GamingBlake2002 3 жыл бұрын

Wireless networks work the same way though

@churchers 3 жыл бұрын

The modern replacement for a hub would be a switch really, we still had routers back then and they serve a different purpose to a hub/switch.

@vinny142 3 жыл бұрын

@@GamingBlake2002 Yes but the data is all encrypted so "the right tools" includes getting the encryption key.

@GamingBlake2002 3 жыл бұрын

@@vinny142 But the application data may not necessarily be encrypted, and the encryption done by the router can be reversed, since you're also connected to the network and therefore have the key.

@Shaunnism 3 жыл бұрын

Thank you for this video. Im a networking student and theres all sorts of little tidbits that professors miss (they only have so many hours for lectures). I'm truely grateful for this channel as a whole.

@rafaelbianco252 3 жыл бұрын

The world needs the part 2 of this video! Nicely done guys!

@AbhishekAhuja0207 2 жыл бұрын

can't stress enough how mike's history lessons are the reason why we understand so much from him :-)

@Itsweet5533 2 жыл бұрын

The "history lesson" in the first half was extremely helpful. I find it much easier to understand concepts and that they are much stickier in the memory with the story. thanks

@bentaye 3 жыл бұрын

Seeing the Netscape browser makes me so nostalgic! My first time using the internet at age 20 :)

@Alchemetica 3 жыл бұрын

Another entertaining and educational Computerphile. Each academic has an interesting style and presentation, if Mike Pound is not just research-based but takes the odd class, It would be interesting to watch a vox pop from a cohort of his students to see if they enjoy his classes as much as I enjoy his presentation style. There could well be a whole documentary lurking in the background based on following the presenters over a semester. Their challenges of funding, hierarchy, student and staff interaction, the production of Computerphile, resources, and more. 👀

@Sam-up5ju 3 жыл бұрын

Roll on the next video! What would I do without DR. Pound's knowledge and Sean's great questions - thanks guys :)

@scwfan08 3 жыл бұрын

Mike is always my favourite guest

@keninswed 2 жыл бұрын

Keep getting back here for this, just gets better every iteration...

@wiilillad 3 жыл бұрын

Mike Pound is always a pleasure.

@exponentmantissa5598 3 жыл бұрын

Technically TCP layer packages its data in segments and the IP layer uses datagrams. Sometimes people get confused when the term packet gets used to represent things at the different layers.

@TheGreatMaverick 3 жыл бұрын

Mike: very, very clever. Sean: Does it ever go wrong? Mike: yes! All the time 14:12

@klfjoat 3 жыл бұрын

I'm gonna need that handshake video. These vids are great, and i give them to fledgling infosec people.

@83vbond 3 жыл бұрын

Loved the history lesson too! Thank you for bringing on the nostalgia. The Netscape N with a starry night was brilliant. I was waiting for a shooting star

@h2_ 3 жыл бұрын

Anyone ever notice he uses the word "alright" as punctuation?

@christopherlawley1842 3 жыл бұрын

It's a teacher thing

@htcmlcrip 3 жыл бұрын

Ilp start adding alright instead of punctuation in my text

@havetacitblue 3 жыл бұрын

It’s a Limey thing...or sniffing a la Billy Idol.

@JonathanBeri 3 жыл бұрын

Great intro! Would love to see DTLS & TLS 1.3 covered in the future!

@autohmae 3 жыл бұрын

I suspect 2 or more videos after this, one or 2 going deeper into basically everything up to TLS1.2 and then a third which talks about all the new TLS1.3 stuff.

@Valery0p5 3 жыл бұрын

Bumping this comment because if I remember correctly the older versions of TLS have been deprecated nowadays

@havetacitblue 3 жыл бұрын

Only 1.3 should be used at this point,,,

@mathwithjanine 3 жыл бұрын

Dr Mike is awesome! Great explanation!

@superjugy 3 жыл бұрын

Love videos from Dr Mike!

@bimbumbamdolievori 3 жыл бұрын

I love the blue IE progress bar with the IP shown below.. bring back memories!!!

@cheaterman49 3 жыл бұрын

This video is awesome. I've dealt with both SSL and TLS, even had to cherry pick ciphers for a reliable (safe) SSL, I figured there was some history behind this mess but didn't expect it to be so interesting :-) admittedly Mike makes everything interesting hahaha!

@BritishBeachcomber 2 жыл бұрын

Takes me back to around 1984 when I developed, from scratch, a secure IT communication system for the London Metropolitan Police using the Open Systems Interconnection (OSI) 7 layer model, based on the "Blue Book" standard.

@lohphat 3 жыл бұрын

It was Dr.Taher Elgamal the security researcher who lead the team for the development of SSL at Netscape. He is known as the “Father of SSL”.

@wannabedal-adx458 3 жыл бұрын

whoa, wait up. The video ended??!?!?!?! I was learning so much!!! Also, keep bringing the history lessons. Very helpful!!!

@abdullahbukhari1469 3 жыл бұрын

I absolutely love Dr.Mike, have been codin' for more than 10 hours today and the sort of satisfaction I get from him explaining is unbelievable. Wish he had a KZfaq channel

@mattjclay 3 жыл бұрын

I see Mike, everything else stops.

@shaun_rambaran 3 жыл бұрын

No pen spins today, but I just noticed his very strange common P.

@klyanadkmorr 3 жыл бұрын

Da POUND, POUNDin it

@rajeshprajapati1851 3 жыл бұрын

Well explained the history, I would love to watch him talking about POODLE, BEAST, BREACH, CRIME attacks on different versions of TLS/SSL.

@qzbnyv 3 жыл бұрын

Honestly, don’t apologise for the history lesson! I love them. From you Mike, from Prof Brailsford, it’s all great. The how-to can always come in a later vid (-:

@kyrond 3 жыл бұрын

Great video, I love Dr Mike Pound!

@marklonergan3898 3 жыл бұрын

Looking forward to part 2. Side-note, the amount of times the OSI model is referenced but i dont think i ever saw a vid on it. I'd love an in-depth one on that.

@playmaker4053 3 жыл бұрын

honnest, hold a entire OSI model on a 20minutes format video isnt reallistic, 4-5videos maybe

@marklonergan3898 3 жыл бұрын

@@playmaker4053 only talking about doing an overview. Wasn't suggesting going into detail about each protocol or anything. Anyone that knows the model well could easily talk about it for hours, but that doesn't mean you can't give a 20-minute overview to anyone that doesn't know it. For each layer, here's the name, its overall purpose is this, here is a list of a few of the protocols at this layer. Even this approach might be helpful to newcomers and would only take a few minutes to list, leaving plenty of room to go into more detail where they want and leave room for padding with banter. 🤣

@moises8war 2 жыл бұрын

I really enjoyed those 9.5 minutes of history lesson!

@kaisergurdeep 3 жыл бұрын

Great video and very useful with the history being explained first

@omarbousbia6916 3 жыл бұрын

Great educational video as usual 👍

@St1ckl3r 2 жыл бұрын

This channel is super cool!

@TylerWasick 3 жыл бұрын

I vote for another video talking about the handshakes.

@mr.t877 2 жыл бұрын

You guys are awesome to say the least!

@oliverzhang6102 3 жыл бұрын

Love it. Keep up with the good work! thanks!

@carlson6022 2 жыл бұрын

Rooooters? Lol this guy is my hero. I love the off the cuff history lesson and technical info simultaneously.

@technickuk 3 жыл бұрын

Love these videos, they're really informative and break things down nicely to be understandable. Please keep making them. However, why is the host Sean Riley dressed up as the Ready-Brek man!? 😁👍

@ChrisWalshZX 3 жыл бұрын

Excellent video. NN and IE history was really interesting. Next video... Public Key Authentication process?

@riceman78 3 жыл бұрын

So well explained! Thanks!

@giveaway4002 3 жыл бұрын

Please I can't wait for next video!!!!!!!

@maikellopez1886 2 жыл бұрын

Excellent explanation

@ITsikkerhet 3 жыл бұрын

Better than a 2h lecture i had today.

@asafnisan 2 жыл бұрын

The history lesson was quite important, in my opinion. So thanks for that.

@Jesseeeeee 3 жыл бұрын

I wanna hear Mike say "My name is Pound, Mike Pound"

@RussellRiker 3 жыл бұрын

Thank you as always for wonderful content. I really wish I lived closer to your University so I could take classes in person (when the human malware is over). It's also nice to see another lefty. 👍😂

@nauthic3p0 3 жыл бұрын

Great to see what carries you away :D

@lesmo34 3 жыл бұрын

I love how the brown paper got upgraded

@dmahadeo 2 жыл бұрын

Well done. 👍 Simple enough for beginners. Just right.

@jingcao1541 3 жыл бұрын

I am watching my previous teacher’s KZfaq video to prepare for my current job interview 😂

@matiasm.3124 3 жыл бұрын

Very nice .. next video can you explain the low level details.. exchanges between client server and CAs public side ?

@anirudhbrahmajosyulw8650 3 жыл бұрын

Wow this awesome man!

@tramsgar 3 жыл бұрын

MS are still but wholes albeit in more subtle ways now. Thanks for reminding and/or educating on that topic 😉

@masettyvivek8155 2 жыл бұрын

This guy is the best !!

@EnTHuSiAsTx94 3 жыл бұрын

Loved the history lesson in the beginning

@goldfish8196 3 жыл бұрын

Excellent professor

@ue9578 3 жыл бұрын

A video about the weak implementation of the DeFi protocol in Harvest exploit would be interesting. The attacker used a padding oracle attack as I understood.

@georgeg1126 3 жыл бұрын

Great video.

@drskelebone 3 жыл бұрын

Am I more drunk than expected, or is the background shifting colors, especially towards the end of the video?

@Computerphile 3 жыл бұрын

Yes Mike's camera is on auto white balance and the sun kept coming out changing the brightness & colour temperature - hth -Sean

@trefmanic 3 жыл бұрын

It's an interesting coincidence that hash symbol (#) is also called a 'pound' and Dr. Pound is talking about cryptography :-)

@Zeecarver 3 жыл бұрын

Dr. Pound was touched by the Hand of Midas for this one

@Zohdiak 2 жыл бұрын

This guy is awesome!

@NumptyGrumble 3 жыл бұрын

A video on TLS handshaking would be interesting.

@rasathuraisivaram8301 3 жыл бұрын

This is an abstract view of TLS. Waiting for the Next One

@rasathuraisivaram8301 3 жыл бұрын

@Stay EZ My Friends Thanks Buddy

@Syphdias 3 жыл бұрын

Could you do a video on STARTTLS/STLS and how it differs from normal TLS?

@randomorgan5891 2 жыл бұрын

Who is this teacher? Does he do any online training or something ? Would love to be a student of his. His explanations are by far most constructive and most ear pleasing to hear.

@SoulJah876 3 жыл бұрын

This was timely - I'm using IISCrypto to harden some web servers all week. Thank you.

@keithmoon2718 3 жыл бұрын

I like the history lessons. No need to apologise for the history lessons!

@coolnormal 3 жыл бұрын

Does anybody know what program Dr Pound is using to draw on his surface tablet?

@thuokagiri5550 3 жыл бұрын

MIke Pound : The Richard Feynman of computer science

@michaelbredell 3 жыл бұрын

Yes please make another video showing the handshakes etc :D

@vinaychand8101 3 жыл бұрын

I do have question on how our udp works with tsl. Suppose we are having a video call on zoom, we are using udp for video and voice right? how are those communications secured?

@TheSam1902 3 жыл бұрын

9:33 THAT'S A DISCORD NOTIFICATION BEEP ! So you're using Zoom, Teams, and Discord ? Interesting

@daniellambert6207 3 жыл бұрын

Great content. May I recommend a lav lapel mic for Dr. Mike Pound? The room reverb was a tiny bit distracting

@OKEKOBEB 3 жыл бұрын

Could someone please tell me what tablet is that and which software if you know about it?

@Choco-wu6ju 3 жыл бұрын

Can I request a topic? I'd love to see some videos about HTTP/3 and QUIC

@BritishBeachcomber 2 жыл бұрын

6:52 you don't need to patent something to stop others from doing so. You just release it into the public domain, automatically preventing any future patents.

@ridaennasry2558 Жыл бұрын

the history lesson is awesome btw

@rickelmonoggin 3 жыл бұрын

I was enjoying the history lesson!

@Cofcos 3 жыл бұрын

What odd timing. Just last week I was having a problem where everything that used TLS, notably KZfaq, was extremely slow while anything that didn't, notably games, worked perfectly fine. After much work, I was able to narrow the problem down to TLS but nothing I did fixed it. And yes, I tried everything that should've fixed it. In the end, it seems to have fixed itself and I suspect it was an ISP problem... Oh, well, I learned quite a bit about how networking works and changed to a better browser...

@YouPlague 3 жыл бұрын

Hey, I liked the history lesson!

@nwpgunner 3 жыл бұрын

Does tls prevent eavesdropping when using proxies or vpns?

@dodoslavn 3 жыл бұрын

how can hearthbleed extract ram of other programs? are they locked in virtual memory space?

@jerkshop 3 жыл бұрын

I wish this guy's my mentor.

@richardhunter132 Жыл бұрын

the history is certainly useful for understanding why the technology is as it is today.it's not just a nostalgia trip

@hellowill 2 жыл бұрын

Any vid on SNI?

@Flying0Dismount 3 жыл бұрын

Can you comment on services that are using wildcard certs for encrypting, especially CDNs where this could create major inter-tenant security issues...