All right, welcome back, my friends, this session is about understanding the steps because we we
have just learned about GDP.
This is all about the exchange that happened between browser and the Web application.
This is all about understanding how the Internet works.
This is all about understanding how how all the traffic really works.
OK, so we have just got an idea about a city.
Let's get started with steps before we jump into it.
We need to understand what's wrong with a now, and it will sound pretty clear to you for sure.
Now, what happened is in case of a CDB, what happened is the user or the Klein browser don't do the
dance to the Web browser directly over the Internet right directly or the Internet to get access to
any of this site.
All right.
And when it's initiated the conversation or exchanging information, it is not assurity from the SCDP
about the user.
Whatever you are sharing or the public network, it is confidential.
It is.
It is there is confidentiality maintained across it.
Right.
What it means is there is no assurity that whatever you're sharing between you and the Web server,
it's going to be private.
OK, and of course, that is pretty much obvious because the DP was initially wasn't really initially
made from the purpose to keep your information secure.
It was meant to have digital transformation.
It was it was made to have a web of very application accessible for everyone.
It is made to have a usage of of of website and available for everybody in a very simplified manner
so that anybody can can see what what all the content present just on a single page.
And in fact, anybody can even make a website.
Right.
So that was the book was the security wasn't the initial thought.
And that's usually in most of those situations.
But unless there is there's a threat which really brings up huge alerts or more and more alerts, jump,
jump, jump, jump up.
And, you know, the the threshold really comes up.
So that's what it happens when you look at the B, B, the connection between your users, your browser
to your server is not secure.
It's not encrypted in a way.
So when I say encrypted, it means that whatever information you sharing get encrypted and shared through
the web server.
And that's going to happen in case of a GPS wherein there is a tunnel, basically a session or an encrypted
channel get established between your browser and the website server just like this.
So in this situation, you have a user over here and a server on the other side.
And whatever your user is sending and getting exchanged back and forth, there's nobody else get the
idea what is exactly inside this data.
And that is what that is would deliver through airstrip's.
And understand one thing.
Stapper is secure SCDP, SSL, SCDP, and this is possible because of SSL certificate.
In order to achieve this.
The requirement is the application.
The requirement is always has to be from the application itself.
That means the website or the website should have and basically should have assisted cert if it has
a system certificate that only the user browser can establish the SSL connection.
And that's pretty easier to understand is in fact nowadays all the all the banking transaction, even
the normal site as well, where you have a login account.
So you have some private information to share, login credentials and all the stuff.
It isn't.
It is it is highly recommended by every websites to have assistance certificates.
And after that lets encrypt and many of the three services, it is not widely available everywhere.
Right.
So you can even.
Then you can go to any any browser and let's say this is musila dot org.
You can even look at on the left hand side of this log itself indicate that this connection is secure.
And you can get the idea, OK, this this has this has got the certificate as well from the so you can
get the more information about the certificate.
The certificate is is is installed on Mozilla dot org, and this website doesn't supply the ownership
information.
The certificate has been delivered by these significant authority which would be from you.
So there are many others Ghoulardi provide that to that very same and many other website who provides
the certificate there.
That was Komoro earlier now provided by Pingo as well.
You can get to see all the certificate now.
Even if you go to Google dot com, you will definitely find it on the top of it, right?
This is all possible because oh, by default and provide you with such great.
But remember one thing.
Every Web site that you you look for even give me let me show you how that works on the other side.
Yeah.
This is CNN.
You can find a link on the dot.
But as you can see, it is provided by Google Sign and assume you can get these get the certificate
information.
When was it delivered?
It's going to expire on May seven to 2021, the moment and get expired.
You will see another message as well on the dot stating that the U.S. code is about to expire.
This might be a problem as well when the certificate would expire.
This means your session between between your browser to your website is no more secure.
So it is possible that your communication may get hijacked.
OK, so this is all about a steeps on the natural will be understanding what is needed for the station
about how those SSL or SCDP outside the DNS communication basically happened back and forth.
And this is what we'll be talking about as a part of corruption, hashing mechanism and everything.
All right.
I hope this makes sense to you.
We'll get you in the next hour.
Thank you.