TLS in Practice: Session Resumption, mTLS, and Automated Issuance

Three practical topics for operating TLS on top of the basic handshake. Session resumption and 0-RTT cut the repeated cost, mTLS authenticates the client too, and ACME automates certificate issuance and renewal.

April 12, 2024 · 6 min read

TLS Handshake and Certificates

TLS builds a secure channel over an untrusted network by providing confidentiality, integrity, and authentication. A walkthrough of symmetric/asymmetric hybrid encryption, the TLS 1.2 handshake, the certificate and PKI trust model, and what TLS 1.3 improved.

April 5, 2024 · 7 min read