Table of Contents

Part I: SSL/TLS and PKI
1. SSL, TLS, and Cryptography
2. TLS 1.3
3. TLS 1.2
4. Public Key Infrastructure

Part II: Problems and Attacks
5. Attacks against PKI
6. HTTP and Browser Issues
7. Implementation Issues
8. Protocol Attacks

Part III: Deployment and Development
9. Performance
10. HSTS, CSP, and Pinning
11. Configuration Guide

Part IV: OpenSSL Command-Line
11. Working with OpenSSL
12. Testing TLS servers with OpenSSL

About the Author

Ivan Ristic writes computer security books and builds security products. His book Bulletproof TLS and PKI, the result of more than a decade of research and study, is widely recognised as the de-facto SSL/TLS and PKI reference manual. His work on SSL Labs made hundreds of thousands of web sites more secure. Before that, he created ModSecurity, a leading open source web application firewall.

More recently, Ivan founded Hardenize, a platform for continuous security monitoring that provides free assessments to everyone. He's a member of Let's Encrypt's technical advisory board.