Internet Security - TLS and Beyond

Submitted Mar 12, 2018

Section: Full talk Technical level: Intermediate

Role of TLS in Cyber Security. The talk covers common fellacies, best practices and guidelines around TLS usage and implementations. The future of TLS with the evolution of Quantum computing as well as advanced persistent threats.
The advanced part of the session discusses the CA-less TLS system evaluations and automated systems like “Let’s Encrypt”.
While this talk gives you everything about the SSL/TLS system, it has targeted contents for the website administrators as well. The reasoning and philosophy behind the driving principles give you enough knowledge to take architectural decisions as well as understand and troubleshoot various technical issues.

Outline

TLS Communication
Certificate lifecycle and role of CA
OpenSSL - Library and CLI
Chain of trust
Trust stores
CA-less architecture POCs
TLS automations

Requirements

internet security enthusiast.

Speaker bio

CISSP certified professional with 17years of experience. Worked for Yahoo, Dreamworks before.
Currently Staff Engineer at Site Reliability Engineering, Intuit India

Comments

Previous Next

Consul - A travelogue at Intuit

This is a story about how a cloud application that serves 2.5M customers online manages its auto-scaled server fleet where propagation of dynamic configurations across the environment is a challenge. The session touches upon how Consul can be leveraged for service discovery, configuration management and even in BCP operations. It was journey of migrating a massive monolith to AWS and willing to s… more

12 Mar 2018

Rootconf 2018