What the HTTPS padlock means: how your browser talks in secret on a Wi-Fi anyone can read
Certificate authorities: who signs that a public key belongs to a website
Your phone gets a key that says it belongs to your bank. Your phone has never met your bank. So someone else has to promise that the key is real. A few companies do this as their job.
-
1
Two public keys reach Miva's phone. Each one comes with a note: "I belong to shop.example". The real shop sends something better than a note: a certificate that says "shop.example uses this public key", signed by a certificate authority.
-
2
A certificate authority is a company whose job is to check before it signs. Before signing this one, it made sure that whoever asked really runs the name shop.example.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88