<story><title>How HTTPS Works</title><url>https://howhttps.works/</url></story><parent_chain></parent_chain><comment><author>jwcrux</author><text>I love seeing comics like this that aim to show concepts in simple ways. Kudos!&lt;p&gt;Worth noting that &amp;quot;The Handshake&amp;quot; episode [0] covers the key exchange using RSA. This has the downside that it doesn&amp;#x27;t support forward secrecy, meaning if an attacker ever compromises the server&amp;#x27;s private key they can retroactively decrypt traffic they previously captured.&lt;p&gt;It&amp;#x27;s more common these days to use an ECDHE exchange in which the client and server exchange keys that are generated just for this session (or at least, they should be [1]) and use those to generate the &amp;quot;shared secret&amp;quot;.&lt;p&gt;In fact, in TLS 1.3 ECDHE is the only key exchange mechanism. [2]&lt;p&gt;The server then uses its long term keypair corresponding to the certificate to sign all the handshake messages that were seen previously [3].&lt;p&gt;[0] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;howhttps.works&amp;#x2F;the-handshake&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;howhttps.works&amp;#x2F;the-handshake&amp;#x2F;&lt;/a&gt;&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;raccoon-attack.com&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;raccoon-attack.com&amp;#x2F;&lt;/a&gt;&lt;p&gt;[2] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;blog.cloudflare.com&amp;#x2F;rfc-8446-aka-tls-1-3&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;blog.cloudflare.com&amp;#x2F;rfc-8446-aka-tls-1-3&amp;#x2F;&lt;/a&gt;&lt;p&gt;[3] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;tools.ietf.org&amp;#x2F;html&amp;#x2F;rfc8446#section-4.4.3&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;tools.ietf.org&amp;#x2F;html&amp;#x2F;rfc8446#section-4.4.3&lt;/a&gt;</text></comment>
<story><title>How HTTPS Works</title><url>https://howhttps.works/</url></story><parent_chain></parent_chain><comment><author>kzrdude</author><text>Unsolicited constructive criticism is that I think the comic could do with a bit more spacing between the panels, it gets easier to read feels less dense that way - that&amp;#x27;s what I think.</text></comment>