Good articles to read on SSL and HTTPS?
- by Igor Romanov
I had a problem with accepting invalid SSL certificate in my iPhone program. That problem is solved now, however I came to understanding that I have very abstract idea on how exactly the whole thing is working:
how web browser is verifying that received certificate is really for host it communicates to and not faked by same party in the middle?
if browser talks to some 3rd party (CA?) to do certificate check?
and many other questions...
Would someone please recommend good source of information with in-depth enough description of how all parts click together?