1. SSL/TLS HTTPS
security layer in transportation

2. A bite of SSL/TLS
Transport Layer Protection
SPDY?
START TLS?
Diameter?

3. SSL -> TLS
都是SSL实现，
TLS是SSL从3.0
之后起的更
strong的加密层
协议

4. HTTP + SSL = HTTPS
HTTP
传输协议，具体的通信由
TCP层负责
Application layer on TCP
SSL
SSL也是在TCP层上实现
的，可以视作一个安全中间件
security-middleware
HTTPS
是server端通
过增加握手次数
实现对HTTP通
信加密的过程
Handshake
+ Encryption

5. Difference of HTTPS
● port 80 -> 443 (usually)
● raw data stream -> fragments in protection
independently
● browser/client directly reader -> decrypted
and verified
● HTTP header -> SSL version added
● Content type: application_data, alert,
handshake and change_cipher_spec

6. CA chain
Certificate Authority
Chain of trust

7. Rules provided OWASP
https://www.owasp.org/index.
php/Transport_Layer_Protection_Ch
eat_Sheet#SSL_vs._TLS

8. Support HTTPS
Webrick -> Rack TCP middleware
certs and keys
Sinatra Router
no change !