Let's get down to a practical implementation of SSL and TLS

SSL/TLS is a standardized, widely implemented, peer-reviewed protocol for applying cryptographic primitives to arbitrary networked communications. It provides privacy, integrity, and a measure of authenticity to otherwise inherently untrustworthy network connections.

While most books detail the protocol, this one is intended to provide you with a nearly complete SSL/TLS library, developed incrementally using C code. Whether or not you have a working knowledgeof cryptography, you'll find this practical guide helps you understand the internals of these libraries so that, when it comes time to use one, you will have a firm understanding of what takes place at each stage.

• Understand secure sockets and the HTTP protocol

• Learn to protect against eavesdroppers with symmetric cryptography

• Secure key exchanges over an insecure medium with public key cryptography and boost security with elliptic curve cryptography

• Examine the use of digital signatures and X.509 certificates

• Develop a usable, secure communications protocol with client-side TLS

• Add server-side TLS 1.0 support

• Use SSL in advanced situations, including safely reusing key material with sessionresumption and verifying identity with client authentication

Go to www.wiley.com/go/implementingssl to find code and other features related to this book