@MrJustdontcare nothing get's pwnd, sslstrip just forces h t t p! if the server allows that they are insecure. some site (like gmail) force h t t p s now!
Public key crypto solved the key exchange problem. In the old days, you had to get together with your contact and exchange a key before you could later send messages. And you needed to do this for each message unless you used a one-time pad or something. Either way it was highly impractical. With public crypto, as I said, you can put your public key out there for the world to see and it does no one any good in decrypting messages sent to you with that key. They need your private key.
In public key crypto, each person has two keys. One key is a private key (which must be kept secret) and the other is a public key. The public key can be sent to anyone; you can post it on a billboard or put it in the phone book. It doesn't matter because if an attacker has your public key it does him NO GOOD in decrypting messages sent to you. So, if Alice wants to send Bob a message, all she needs is Bob's public key. Once Bob gets the message, he uses his private key to read.
BUTTT what if you know the encryption algorithm (or pass code) sent from the receiver or you give the receiver a pass code (or packet inject a pass code) to send to the sender???
A very good explanation method of PKI.
magawla 3 days ago
25,000 views, nice
jgonz185 4 months ago
@MrJustdontcare nothing get's pwnd, sslstrip just forces h t t p! if the server allows that they are insecure. some site (like gmail) force h t t p s now!
Thomasikzelf 5 months ago
yeah but what if the "thief" switches the given padlock with his own (so he has the key)...
(this is where certificates en preshared keys come in =D)
Thomasikzelf 5 months ago
Cool.
AlwaysLearningTech 5 months ago
easily pwnd by sslstrip....
MrJustdontcare 5 months ago
Very nice Video, but SSL comparison will help you more to choose right SSL. Chat Live
dattatec.com ElianaPomponio@dattatec.com. Thanks!
dvdestudio 7 months ago
Public key crypto solved the key exchange problem. In the old days, you had to get together with your contact and exchange a key before you could later send messages. And you needed to do this for each message unless you used a one-time pad or something. Either way it was highly impractical. With public crypto, as I said, you can put your public key out there for the world to see and it does no one any good in decrypting messages sent to you with that key. They need your private key.
b1naryd1g1t5 9 months ago
@REPODONE
In public key crypto, each person has two keys. One key is a private key (which must be kept secret) and the other is a public key. The public key can be sent to anyone; you can post it on a billboard or put it in the phone book. It doesn't matter because if an attacker has your public key it does him NO GOOD in decrypting messages sent to you. So, if Alice wants to send Bob a message, all she needs is Bob's public key. Once Bob gets the message, he uses his private key to read.
b1naryd1g1t5 9 months ago
BUTTT what if you know the encryption algorithm (or pass code) sent from the receiver or you give the receiver a pass code (or packet inject a pass code) to send to the sender???
REPODONE 10 months ago