What the HTTPS padlock means: how your browser talks in secret on a Wi-Fi anyone can read
Digital signatures: how a website proves who it is without showing its secret
Anyone can send your phone a message that says "I am the website of your bank". The real website can prove it. It uses a secret that it never shows to anybody. How?
-
1
Rono says "I am shop.example", and the real shop says it too. But the shop has something Rono does not have: a pair of keys, made together. The private key never leaves the shop's server, and anyone may copy the public key.
-
2
During the key exchange, the shop takes everything said so far, both mixes included, and signs it with its private key. Only that key can make this signature.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88