110 likes | 200 Vues
Explore SSL security implementation on web servers, certificate-based authentication, and best practices for securing web traffic. Learn about choosing private or commercial CAs, SSL configuration options, and certificate deployment for complex setups. Understand web-based authentication methods, certificate mapping types, and steps for implementation in IIS and Active Directory.
E N D
PKI 2: Protezione del traffico Web tramite SSL Fabrizio Grossi
Overview • Introduction to SSL Security • Enabling SSL on a Web Server • Implementing Certificate-based Authentication
Introduction to SSL Security • Why Use SSL to Secure Web Traffic? • Multimedia: Using SSL to Secure Web Traffic • Certificates Used for an SSL Session • Guidelines for Choosing a Private or Commercial CA
Why Use SSL to Secure Web Traffic? • By default, HTTP packets are transmitted as plaintext • Implement SSL to: • Encrypt the transmitted data at the application layer • Enable Web clients to authenticate the Web server
Web Server Internet HTTP Web Client Web Server Using SSL to Secure Web Traffic
Enabling SSL on a Web Server • How to Acquire a Web Server Certificate from a Private CA • How to Acquire a Web Server Certificate from a Commercial CA • SSL Configuration Options • Certificate Deployment for Complex Configurations • Guidelines for Enabling SSL Security
Implementing Certificate-based Authentication • Web-based Authentication Methods • Types of Certificate Mapping • How to Implement Certificate Mapping in IIS • How to Implement Certificate Mapping in Active Directory • Guidelines for Certificate Mapping
Web-based Authentication Methods * = low; ***** = high