Tools / SSL Certificate Interview Questions
How SSL certificates are validated?
SSL certificates are validated through a process called SSL handshake. When a client connects to an SSL-secured server, it requests the server's public key in its certificate. The client checks if the certificate was issued by a trusted party (known as a Certificate Authority), is not expired, and has not been revoked. It also verifies that the certificate matches the site it's connecting to. If these checks pass, the client uses the public key to encrypt a random symmetric encryption key and sends it to the server with the encrypted URL required and other encrypted HTTP data. The server decrypts the symmetric encryption key using its private key and uses the symmetric key to decrypt the URL and HTTP data.
More Related questions...
