<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Taki_UP的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Taki_UP</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Taki_UP]]></copyright><item><title><![CDATA[【学习笔记】TLS/SSL握手]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142487223</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142487223</guid><author>Taki_UP</author><pubDate>Tue, 24 Sep 2024 17:45:34 +0800</pubDate><description><![CDATA[本篇介绍了TLS握手的实际握手过程，TLS握手创建了Client和Server之间“被保护的通道”，2个单向通道用来保护批量数据的传输，一个通道是从Client到Server，另一个是从Server到Client。本篇介绍了最基础的握手 - 即握手采用的是RSA密钥交换，并通过追条记录（Record）的形式来阐述该过程。]]></description><category></category></item><item><title><![CDATA[【学习笔记】TLS/SSL握手之Records]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142204692</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142204692</guid><author>Taki_UP</author><pubDate>Mon, 23 Sep 2024 14:28:02 +0800</pubDate><description><![CDATA[本篇介绍了TLS握手中Record的概念及组成部分]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL/TLS证书安全机制之证书透明]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142339701</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142339701</guid><author>Taki_UP</author><pubDate>Thu, 19 Sep 2024 10:23:48 +0800</pubDate><description><![CDATA[本篇简单介绍了证书透明的概念、运作机制以及3个角色]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL/TLS安全机制之CAA]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142336508</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142336508</guid><author>Taki_UP</author><pubDate>Wed, 18 Sep 2024 17:28:25 +0800</pubDate><description><![CDATA[本篇主要介绍了CAA的概念、解决的问题以及生效方式]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL/TLS安全机制之HSTS]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142250690</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142250690</guid><author>Taki_UP</author><pubDate>Wed, 18 Sep 2024 15:11:38 +0800</pubDate><description><![CDATA[本篇介绍了HSTS即HTTP严格传输安全的定义以及工作原理]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL密码套件的选择]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142175143</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142175143</guid><author>Taki_UP</author><pubDate>Thu, 12 Sep 2024 17:21:52 +0800</pubDate><description><![CDATA[本期将密码套件的每个协议进行划分，分别是Avoid（未来可能有风险）、Accept（如果客户用的是过时的）和Prefer（最安全的）]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL密码套件之哈希]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142146392</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142146392</guid><author>Taki_UP</author><pubDate>Thu, 12 Sep 2024 13:33:30 +0800</pubDate><description><![CDATA[本篇介绍了TLS/SSL密码套件中常用的哈希算法，包括Poly1305、SHA384、SHA256、SHA、MD5]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书密码套件之加密]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142097646</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142097646</guid><author>Taki_UP</author><pubDate>Wed, 11 Sep 2024 17:26:38 +0800</pubDate><description><![CDATA[本篇介绍l1密码套件中加密常用的协议并将他们进行比较，包括：CHACHA20、AES-256-GCM、AES-128-GCM、AES-256-CBC、AES-128-CBC、3DES-CBC、RC4-128、DES-CBC]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书密码套件之Authentication]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142092151</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142092151</guid><author>Taki_UP</author><pubDate>Tue, 10 Sep 2024 14:03:26 +0800</pubDate><description><![CDATA[本篇介绍了密码套件中Authentication常用的协议，包括：ECDSA、RSA、DSS和PSK。在RSA和DSA之间，我们选择RSA；在RSA和ECDSA中，如果客户端支持，那么选择ECDSA]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书之前向保密]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142059612</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142059612</guid><author>Taki_UP</author><pubDate>Tue, 10 Sep 2024 09:57:30 +0800</pubDate><description><![CDATA[本篇介绍了密码学中前向保密（Forward Secrecy）的相关内容]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL密码套件之密钥交换]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142056266</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142056266</guid><author>Taki_UP</author><pubDate>Mon, 09 Sep 2024 14:38:53 +0800</pubDate><description><![CDATA[本篇介绍了密钥交换常用的协议，分别是ECDHE，DHE，ECDH，DH，RSA，PSK]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书之密码套件总览]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/142050966</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/142050966</guid><author>Taki_UP</author><pubDate>Mon, 09 Sep 2024 11:27:21 +0800</pubDate><description><![CDATA[1、概念：密码套件（Cipher Suites）定义了用于实现安全通信的实际协议。为了达到以上4个内容，Client和Server必须就具体协议达成一致，这就是。接下来几篇将介绍密码套件每个部分加密函数最常见的协议。]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书安全机制之证书撤销]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141958752</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141958752</guid><author>Taki_UP</author><pubDate>Fri, 06 Sep 2024 16:51:05 +0800</pubDate><description><![CDATA[本篇介绍了证书撤销的相关概念及方式，分别是CRL、OCSP和OCSP Stapling]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书安全机制之证书链]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141928614</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141928614</guid><author>Taki_UP</author><pubDate>Fri, 06 Sep 2024 10:19:20 +0800</pubDate><description><![CDATA[本篇介绍了证书链，从根证书，中间证书，到服务器证书，阐明了证书链的原理，并给出示例]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书安全机制之证书验证]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141866874</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141866874</guid><author>Taki_UP</author><pubDate>Wed, 04 Sep 2024 14:49:19 +0800</pubDate><description><![CDATA[每当Client从Server收到一张证书，有2件事Client需要去验证：证书是否有效？Server是否是证书真正的拥有者？本篇将进行详细介绍...]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书之RSA、Diffie-Hellman和DSA]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141856894</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141856894</guid><author>Taki_UP</author><pubDate>Tue, 03 Sep 2024 16:48:04 +0800</pubDate><description><![CDATA[本篇将介绍SSL证书中使用到的3中算法，分别是RSA算法、Diffie-Hellman算法和DSA（电子签名算法）]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书之PKI（公钥基础设施）]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141825076</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141825076</guid><author>Taki_UP</author><pubDate>Mon, 02 Sep 2024 18:04:06 +0800</pubDate><description><![CDATA[PKI的定义、构成以及不同类型]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL/TLS如何运用加密工具]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141817112</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141817112</guid><author>Taki_UP</author><pubDate>Mon, 02 Sep 2024 17:15:49 +0800</pubDate><description><![CDATA[介绍了SSL/TLS如何提供Confidentiality、Integrity和Authentication来保护在线的数据]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书之混合加密（Hybrid Encryption）与签名（Signatures）]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141684540</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141684540</guid><author>Taki_UP</author><pubDate>Fri, 30 Aug 2024 16:28:25 +0800</pubDate><description><![CDATA[本篇介绍了公钥、私钥、混合加密、签名]]></description><category></category></item><item><title><![CDATA[【学习笔记】SSL证书之加密（Encryption）]]></title><link>https://blog.youkuaiyun.com/Taki_UP/article/details/141680704</link><guid>https://blog.youkuaiyun.com/Taki_UP/article/details/141680704</guid><author>Taki_UP</author><pubDate>Thu, 29 Aug 2024 16:37:33 +0800</pubDate><description><![CDATA[1、Encryption（加密）用来提供数据保密性，只有预期的接收方能够翻译该数据。因此，出现了基于密钥的加密（Key Based Encryption）RC4                128 bit key 不再使用。DES                56 bit key 不再使用。2、简单加密：将明文转换成密文。3、基于密钥加密的2种类型。]]></description><category></category></item></channel></rss>