Public Key Infrastructure

In 2009, I read about asymmetric encryption, also known as public-key cryptography, for the first time in Bruce Schneier’s book, Secrets & Lies. At the time, I did not fully understand the power of asymmetric encryption algorithms, what they could enable, or how cool they actually are. …

“Problem with PKI?” I hear you query. Yes, my stalwart cyber friend, but not just ‘the problem with PKI’ — more like ‘the multiple problems with PKI’. But first, for the non-Internet-aficionados among you: an HTTP primer. HTTP and PKI PKI was first developed in the 1970s, at none other than James Bond’s…

The Public key infrastructure (PKI) is a framework (guideline) that consists of several security policies, communication protocols, and procedures to enable secure and trusted communication between different entities using public-key encryption. This framework relies on a hierarchy of trust relationships, by providing authentication (to confirm the owner using digital certificates)…

Background In the first article of this series, I gave a high-level overview of TLS handshake. It covers many complex concepts like encryption/decryption hash function public key private key and digital certificate. These concepts are defined in the framework of Public Key Infrastructure (PKI). Let’ continue exploring the PKI. This article…

Ottr is a serverless Public Key Infrastructure framework that handles end-to-end certificate rotations without the use of an agent. The purpose of the blog is to provide an overview on Ottr with sample reference architecture, logical and network flows, and highlight the benefits of the solution. For installation instructions, skip…

Public Key Infrastructure (PKI) is a framework for creating a secure connection between the server and the client in an unsecured network. PKI handles public-key and private-key pair generation, distribution, storage, and revocation. PKI prevents unauthorised users and keeps organisational data secure. Conventionally, PKI operates based on public keys and…

A simplified explanation of HTTPS, Certificate Authority, Digital Signatures, and the PKI (Public Key Infrastructure) — When you see a “lock” icon in your browser address bar, it indicates that the site is using “https” and you are on a “secure” connection. But what exactly does that mean?

Introduction: In this article, we are going to see how public key infrastructure(PKI) works. Audience Software Engineer, Security Engineers, Developer, System admin, DevOps. What is PKI?? A public key infrastructure (PKI) is a collection of internet technologies that provide secure communications in insecure public networks. …