Free Names and the web lessonsNames and the web · Stage 2 · Security and the whole journey · Step 1
TLS and HTTPS
See how a browser and server agree on a secret over an open network, and what a certificate proves. About 15 minutes.
Why does a browser check that the name in a certificate matches the site it is visiting?
- AAnyone can obtain a valid certificate for their own domain; it only proves identity if it is for the name you asked for
- BTo speed up the handshake
- CThe name is used as the encryption key
Show the answer
Anyone can obtain a valid certificate for their own domain; it only proves identity if it is for the name you asked for. Otherwise an attacker could present a valid certificate for their own site.
4 questions on this idea
Short questions that apply the idea to new cases: trace it, work out a number, put steps in order. A wrong answer explains itself.
Answer them in your browserFree account, no card. Your progress is saved, and the idea comes back in a quick review later.
Sign up free to solve