How HTTPS Works

I love seeing comics like this that aim to show concepts in simple ways. Kudos! Worth noting that "The Handshake" episode [0] covers the key exchange using RSA. This has the downside that it doesn't support forward secrecy, meaning if an attacker ever compromises the server's private key they can retroactively decrypt traffic they previously captured. It's more common these days to use an ECDHE exchange in which the client and server exchange keys that are generated just for this…

I found the layout confusing but stuff like this is desperately needed. Encryption is a difficult subject but so important to how the Internet functions; the better people understand the concepts the better decisions they will make. I tried to explain explain how the web browser retrieves a web page (including HTTPS) in simple terms once; the resulting text quickly got away from me[0] so I respect the creators of this for trying. [0] https://sheep.horse/2017/10/how_you_are_reading_this_page.ht...