Live briefing
Everything about HTTPS
HTTP extension supporting TLS encryption
Hypertext Transfer Protocol Secure (HTTPS) is an extension of the Hypertext Transfer Protocol (HTTP). It uses encryption for secure communication over a computer network, and is widely used on the Internet. In HTTPS, the communication protocol is encrypted using Transport Layer Security (TLS) or, formerly, Secure Sockets Layer (SSL). The protocol is therefore also referred to as HTTP over TLS, or HTTP over SSL. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: HTTPSA 5-minute orientation
- Skim a recent paper: Detecting DNS over HTTPS based data exfiltrationInfluential work since 2022
- Pick up a classic book: As You Like ItThe most-reprinted book on the subject
- Read the landmark paper: Man-in-the-Middle Attack to the HTTPS ProtocolCited 267 times
- Go sideways: Transport Layer SecurityA closely related topic
- Go sideways: HTTPS EverywhereA closely related topic
📖 Definitions
Proper noun Alternative letter-case form of HTTPS.
🏆 Landmark papers (most cited)
Man-in-the-Middle Attack to the HTTPS Protocol
https://riull.ull.es/xmlui/bitstream/handle/915/30978/C_22_%282022%29_28.pdf?sequence=1&isAllowed=y
An Explainable AI-Based Intrusion Detection System for DNS Over HTTPS (DoH) Attacks
Some Challenges of Deep Mining † †This paper was written shortly after this author had presented a video lecture titled “Why rock mechanics and rock engineering?” at the invitation of the ISRM. The lecture addressed the more general topic of the importance of rock engineering in the 21st century, and may be of interest as complementary to this article. The lecture (~ 45min) may be heard at https://www.isrm.net/gca/?id=1309.
Attention-based bidirectional GRU networks for efficient HTTPS traffic classification
HTTPS traffic analysis and client identification using passive SSL/TLS fingerprinting
https://www.ejsss.net.in/uploads/172/15244_pdf.pdf
https://gmsmicrofungi.org: an online database providing updated information of microfungi in the Greater Mekong Subregion
🆕 Influential since 2022
Detecting DNS over HTTPS based data exfiltration
IPCC, 2023: Climate Change 2023: Synthesis Report. IPCC, 184 p., doi: https://doi.org/10.59327/IPCC/AR6-9789291691647
https://inass.org/wp-content/uploads/2022/05/2022083131-2.pdf
Next-generation AI for advanced threat detection and security enhancement in DNS over HTTPS
Summary of DNS Over HTTPS Abuse
📚 Books worth reading
As You Like ItWilliam Shakespeare · 1734
Ten Days That Shook the WorldJohn Reed · 1919
SonnenfinsternisArthur Koestler · 1940
Through the Brazilian wildernessTheodore Roosevelt, Anonymous · 1904
HiroshimaJohn Hersey · 1702
Expedition Kon-TikiThor Heyerdahl · 1949
Charles Darwin's The Voyage of the Beagle:Charles Darwin · 1839
La plaça del diamantMercè Rodoreda · 1964
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Transport Layer Security Transport Layer Security (TLS) is a cryptographic protocol designed to provide secured communications over a computer network, such as the Internet. The…
- HTTPS Everywhere HTTPS Everywhere is a discontinued free and open-source browser extension for Google Chrome, Microsoft Edge, Mozilla Firefox, Opera, Brave, Vivaldi and…
- Server Name Indication Server Name Indication (SNI) is an extension to Transport Layer Security (TLS) where a client indicates which hostname it is attempting to connect to at…
- HTTP Strict Transport Security HTTP Strict Transport Security (HSTS) is a policy mechanism that helps to protect websites against man-in-the-middle attacks such as protocol downgrade…
- Public key certificate In cryptography, a public-key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the valid…
- Certificate authority In cryptography, a certificate authority or certification authority (CA) is an entity that stores, signs, and issues digital certificates. A digital certificate…
- Version history for TLS/SSL support in web browsers Version history for TLS/SSL support in web browsers tracks the implementation of Transport Layer Security protocol versions in major web browsers. Notes…
- Online Certificate Status Protocol The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It was…