You are signed in. Close

You are signed out. Close

Thank you. Your subscription has started. Close

Thank you. You will get an email when a new comic comes out. Close

We could not confirm your payment. If you paid, use the link "Sign in" at the bottom of the page. Close

Something went wrong on our side. Please try again in a moment. Close

Previous episode The TLS handshake: how HTTPS sets up a secret connection in one round trip

What the HTTPS padlock means: how your browser talks in secret on a Wi-Fi anyone can read

Forward secrecy: why a key stolen tomorrow cannot open what was recorded today

Someone records your HTTPS traffic today and keeps it. A year later, the private key of the website is stolen and put online. Can they read their recording now?

  1. 1 A year later, Rono still has his file of scrambled packets from the café. Then attackers break into the shop's server and put its private key online. Rono opens his old file with a big smile.news.exampleshop.example hacked:private key leakeda copyRonothat eveningk%7#x!Qzk%7#x!Qz

    A year later, Rono still has his file of scrambled packets from the café. Then attackers break into the shop's server and put its private key online. Rono opens his old file with a big smile.

  2. 2 Nothing opens. The private key only signed the conversation. It never scrambled a single packet, and the key that did came from somewhere else.that eveningk%7#x!Qzk%7#x!Qzk%7#x!Qzthe shop'sprivate keyRono

    Nothing opens. The private key only signed the conversation. It never scrambled a single packet, and the key that did came from somewhere else.

The rest of this episode is for subscribers

Subscribe to read every premium episode. You can cancel when you want.

Paid yearly: $99 instead of $119.88

Next episode What HTTPS does not hide: who you talk to, when, and how much

Share this comic

More comics