How HTTPS uses a TLS handshake, a key exchange and symmetric encryption to protect data between systems, and why old SSL and early TLS versions should be out of your environment. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

In this deep dive

• Transport or communication encryption: protecting data in motion between systems
• HTTPS as HTTP protected by TLS, and the handshake where the server presents its certificate
• A key exchange that gives both sides the same session keys without sending them, then symmetric encryption for the session
• TLS 1.3 (RFC 8446) as the current version, and RFC 8996 formally deprecating TLS 1.0 and 1.1 in March 2021
• For the exam: TLS is the default answer for web traffic, and old SSL or TLS 1.0 is a finding

This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

Links

• CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)
• All of Chris Rees's Pluralsight courses
• Watch this lesson on YouTube
• Security+ study guides

Transcript and links: https://www.skillthropic.com/podcast/transport-encryption-tls-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=transport-encryption-tls-deep-dive

Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com