From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Protecting web traffic

Protecting web traffic

From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Start my 1-month free trial Buy for my team

Protecting web traffic

“

- In this lesson, we're going to discuss some additional web traffic protections that you can utilize through implementing PKI in your networks. This includes certificate pinning, certificate stapling, and the HTTP strict transport security or HSTS as it's also known. First, let's talk about certificate pinning. Certificate pinning is a method of trusting digital certificates that bypasses the certificate authority hierarchy, and chain of trust. This is allows us to minimize on path or men in the middle attacks. Now, without the use of certificate pinning, when establishing an SSL or TLS Encrypted Transport Connection, an attacker could attempt to substitute a malicious but trusted certificate into the chain of trust, that includes the client, the server, and the intermediate and route certificate authorities by using an on path or man in the middle attack. Once this is done, the attacker could eaves drop on the supposedly secure communications between that client and server…

Contents