December 2017
Intermediate to advanced
410 pages
11h 5m
English
How does a client (browser) verify if the certificate sent by a server is genuine and not tampered with over the network since it is still sent over the un-encrypted channel during the TLS handshake? Let's understand this process. Whenever the server sends a certificate, the client (browser) downloads the certificate. The certificate contains a digital signature that can be found in the certificate signature value.
Just to revise, the digital signature is basically a hash of the data signed by the private key:

The browser comes preinstalled with public keys of trusted CA.
The browser will use the public ...
Read now
Unlock full access