Stage 03 of six
Trust
The padlock is a claim about a chain of signatures, checked against a list of roots the machine shipped with. These three pieces are about what that claim covers, and what it does not.
-
The certificate chain
Your browser trusts a small set of roots, and everything else is vouched for down a chain from one of them.
-
What the padlock does not mean
It says the connection is private, not that the site is honest.
-
Revocation
Withdrawing trust from a certificate turns out to be much harder than granting it.
The rest of the chain
Five other stages01 Origins
One machine at CERN.
02 Resolution
Turning a name into an address.
04 Rendering
From bytes to pixels.
05 The Cascade
Which rule actually wins.
06 Where Browsers Differ
The gap between spec and behaviour.