Enabling SSL/TLS

Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Time
21 hours 25 minutes
Difficulty
Intermediate
CEU/CPE
21
Video Transcription
00:00
>> Hey, Cybrarians. Welcome back to
00:00
the Linux Plus course here at Cybrary.
00:00
I'm your instructor, Rob Goelz.
00:00
In today's lesson, we're going to
00:00
talk about enabling SSL/TLS.
00:00
Upon completion of this lesson,
00:00
you're going to be able to understand
00:00
why we might need to
00:00
use SSL/TLS encryption, and we're
00:00
going to also identify applications that can
00:00
make use of SSL/TLS.
00:00
Non-secure applications could be
00:00
used on a private network.
00:00
Previously, we will do that a lot.
00:00
We don't really worry about securing something.
00:00
But in general, it's just no longer a good idea or
00:00
best practice to send any data in plain text anywhere.
00:00
We saw that there are a bunch of
00:00
applications that we don't use anymore.
00:00
We talked about a lot of them in the previous lesson.
00:00
All of these applications are unsecure
00:00
and unused now because they just sent data plain text.
00:00
The Secure Sockets Layer protocol,
00:00
which was later replaced by
00:00
the Transport Layer Security or TLS protocol,
00:00
is something that we can use to encrypt data.
00:00
Now SSL/TLS are the technologies
00:00
that support Hypertext Transfer Protocol Secure,
00:00
otherwise known as HTTPS,
00:00
and that enables us to have secure connections to
00:00
websites as well as validate the site identity.
00:00
But HTTPS is not the only application
00:00
>> of these protocols, it's just probably
00:00
>> the most well-known one.
00:00
>> Now talking about that,
00:00
some other applications that can
00:00
utilize SSL/TLS encryption are things like LDAP.
00:00
LDAP can utilize SSL/TLS and it sets up
00:00
encrypted LDAP traffic using Port 636.
00:00
This is sometimes known as LDAPS.
00:00
VPN services can also use SSL/TLS.
00:00
These services are usually
00:00
deployed via a web browser interface.
00:00
Sometimes you just refer to it as SSL VPN,
00:00
and then FTP can be secured over SSH.
00:00
We talked about that in the previous lesson,
00:00
but as I also said,
00:00
it can leverage SSL/TLS encryption,
00:00
and this is called FTPS file transfer.
00:00
In this lesson, we covered
00:00
the need for SSL/TLS encryption.
00:00
Best practice was not send data unsecure anymore.
00:00
Then there are some common applications that
00:00
can use SSL/TLS,
00:00
such as web services,
00:00
Apache or Nginx using HTTPS.
00:00
We talked about LDAP.
00:00
LDAP Port 636 will be all that best using SSL or TLS.
00:00
We talked about SSL or TLS VPNs.
00:00
Then also we talked about using FTP,
00:00
using these SSL/TLS encryption,
00:00
and that is called FTPS.
00:00
Thank you so much for being here and I look
00:00
forward to seeing you in the next lesson.
Up Next