Overview

This course features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. In this course, you will explore the essential concepts behind HTTP, HTTPS, and encryption protocols. You will gain a deeper understanding of how these technologies secure online communication, ensuring the confidentiality and integrity of data transmitted over the web. Through interactive examples and real-world applications, you’ll grasp key topics like symmetric and asymmetric encryption, public key infrastructure (PKI), and how to analyze encrypted traffic using Wireshark. As you progress through the course, you will get hands-on experience with tools like OpenSSL and XCA, learning how to generate certificates, set up secure servers, and work with HTTPS on a localhost. You will also explore advanced concepts, such as TLS 1.3, quantum computing implications on cryptography, and how to use Wireshark to analyze encrypted traffic. The course will guide you in setting up your own HTTPS server from scratch, equipping you with practical skills for the real world. This course is perfect for anyone looking to understand web security at a deeper level, especially developers, IT professionals, and network engineers. No prior knowledge of encryption is required, though a basic understanding of networking concepts will help you navigate the course more easily. It offers intermediate-level challenges with practical, hands-on exercises that will solidify your learning. By the end of the course, you will be able to explain how HTTPS works, set up a secure HTTPS server, capture and analyze encrypted traffic, and implement encryption techniques using tools like OpenSSL and Wireshark.

Syllabus

Introduction to HTTP, HTTPS, and Encryption Keys

In this module, we will introduce the basics of HTTP and HTTPS, focusing on their structures and how they enable secure web communication. You will also learn about encryption, including symmetric and asymmetric encryption, and get hands-on experience analyzing HTTP/1.1 and encrypted HTTPS traffic using Wireshark. By the end of this section, you'll have a solid understanding of how encryption and protocols like HTTP/3 enhance the security of online communications.

TLS Deep Dive and the Role of PKI

In this module, we will dive deep into the workings of TLS and HTTPS, exploring how encryption ensures the confidentiality, integrity, and authenticity of data. You’ll gain an in-depth understanding of the TLS handshake, the role of Public Key Infrastructure (PKI), and how digital certificates are generated, verified, and trusted. Additionally, we’ll look at the emerging role of quantum-resistant encryption algorithms, preparing you for the future of secure communications.

Create Your Own HTTPS Server (PRACTICAL)

In this module, we will guide you through the practical steps of creating your own HTTPS server. Starting with certificate creation and key generation using XCA and OpenSSL, you’ll build a secure server on localhost using Node.js. You’ll also learn how to use Wireshark to inspect and troubleshoot your TLS connection, ensuring that your server is properly secured. Finally, we will introduce mkcert for easier management of trusted local certificates, giving you all the tools you need to run a secure HTTPS server.