In this course, you'll extend your HTTP server into a more complete application and apply your understanding of encryption to implement TLS in HTTP. You'll learn how encryption protects data and implement security features to secure your Express.js applications.
Overview
Syllabus
- Unit 1: Introduction to Certificates
- Generate a Self-Signed Certificate and Key Pair
- Inspecting Key and Certificate Details
- Verifying our Certificate
- Extract the Public Key
- Unit 2: Understanding the Chain of Trust
- Generate a Self-Signed Root Certificate
- Create a CSR for an Intermediate CA
- Create a Server CSR and Sign the Certificate
- Unit 3: Adding HTTPS to an Express.js Application
- Enable HTTPS in Express Application
- Trusting Self-Signed Certificates
- Sniffing HTTPS Packets
- Securing our HTTP server using TLS
- Unit 4: Comparing TLS 1.2 vs TLS 1.3: Hands-On Differences
- Configure the Minimum Allowed TLS Version
- Connecting to our Server with TLS 1.2
- Raise the Minimum TLS Version to 1.3
- Trying to Connect to our Server with TLS 1.2
- Set the Maximum TLS Version to 1.1
- Unit 5: Understanding Man-in-the-Middle Attacks and Prevention
- Get the Server's Certificate
- Extract the Certificate
- Convert the Certificate Encoding
- Calculate the Certificate Hash