Bulletproof TLS and PKI Second Edition: Understanding and Deploying SSL/TLS and PKI to Secure Servers and Web Applications
Bulletproof TLS and PKI is a complete guide to using TLS encryption and PKI to deploy secure servers and web applications. Written by Ivan Ristic, author of the popular SSL Labs web site, this book will teach you everything you need to know to protect your systems from eavesdropping and impersonation attacks.In this book, you'll find just the right mix of theory, protocol detail, vulnerability and weakness information, and deployment advice to get your job done: Comprehensive coverage of the ever-changing field of SSL/TLS and Internet PKI, with updates to the digital versionFor IT professionals, help to understand security risksFor system administrators, help to deploy systems securelyFor developers, help to secure web applicationsPractical and concise, with added depth as neededIntroduction to cryptography and the Internet threat modelCoverage of TLS 1.3 as well as earlier protocol versionsDiscussion of weaknesses at every level, covering implementation issues, HTTP and browser problems, and protocol vulnerabilitiesCoverage of the latest attacks, such as BEAST, CRIME, BREACH, Lucky 13, RC4 biases, Triple Handshake Attack, and HeartbleedThorough deployment advice, including advanced technologies, such as Strict Transport Security, Content Security Policy, and pinningGuide to using OpenSSL to generate keys and certificates and to create and run a private certification authorityGuide to using OpenSSL to test servers for vulnerabilitiesThis book is also available in a variety of digital formats directly from the publisher. Visit us at www.feistyduck.com.