110 likes | 195 Views
PKI 2: Protezione del traffico Web tramite SSL. Fabrizio Grossi. Overview. Introduction to SSL Security Enabling SSL on a Web Server Implementing Certificate-based Authentication. Introduction to SSL Security. Why Use SSL to Secure Web Traffic? Multimedia: Using SSL to Secure Web Traffic
E N D
PKI 2: Protezione del traffico Web tramite SSL Fabrizio Grossi
Overview • Introduction to SSL Security • Enabling SSL on a Web Server • Implementing Certificate-based Authentication
Introduction to SSL Security • Why Use SSL to Secure Web Traffic? • Multimedia: Using SSL to Secure Web Traffic • Certificates Used for an SSL Session • Guidelines for Choosing a Private or Commercial CA
Why Use SSL to Secure Web Traffic? • By default, HTTP packets are transmitted as plaintext • Implement SSL to: • Encrypt the transmitted data at the application layer • Enable Web clients to authenticate the Web server
Web Server Internet HTTP Web Client Web Server Using SSL to Secure Web Traffic
Enabling SSL on a Web Server • How to Acquire a Web Server Certificate from a Private CA • How to Acquire a Web Server Certificate from a Commercial CA • SSL Configuration Options • Certificate Deployment for Complex Configurations • Guidelines for Enabling SSL Security
Implementing Certificate-based Authentication • Web-based Authentication Methods • Types of Certificate Mapping • How to Implement Certificate Mapping in IIS • How to Implement Certificate Mapping in Active Directory • Guidelines for Certificate Mapping
Web-based Authentication Methods * = low; ***** = high