A simple and yet concise explanation on HTTPS(TLS)

[davidktw]

It is by no means comprehensive, but it may just bring you closer to understanding it more as you may dig further on your own.

 

[peterchan75]

I just do this and it works.
Didn't bother to get into the detail.
Not into the bolt and nut stuffs.

use HTTP::Tiny;
my $response = HTTP::Tiny->new->get($url);
my $content = $response->{content};

If it does not work then it's probably the site gone bad or need a module update.

Sometimes site admin will put a stop to all the nonsense and said this,
"If you are not a bot, please let us know."
Then I will use this.

use Win32::OLE;
my $IE = Win32::OLE->new( 'InternetExplorer.Application', "Quit" );
Win32::OLE->WithEvents( $IE, \&cleanExit, 'DWebBrowserEvents2' );
$IE->Navigate( $url );
my $content = $IE->Document->documentElement->innerText;

 

[davidktw]

I just do this and it works.
Didn't bother to get into the detail.
Not into the bolt and nut stuffs.

use HTTP::Tiny;
my $response = HTTP::Tiny->new->get($url);
my $content = $response->{content};

If it does not work then it's probably the site gone bad or need a module update.

Sometimes site admin will put a stop to all the nonsense and said this,
"If you are not a bot, please let us know."
Then I will use this.

use Win32::OLE;
my $IE = Win32::OLE->new( 'InternetExplorer.Application', "Quit" );
Win32::OLE->WithEvents( $IE, \&cleanExit, 'DWebBrowserEvents2' );
$IE->Navigate( $url );
my $content = $IE->Document->documentElement->innerText;

None of the codes above will remove you from the burden of getting x509 certs properly provisioned.

When to use and when not to use self-signed certs, when you can be your own private CA and issue out certifications. How multi domains, wildcard domains certs work. When handshake failed for whatever reason, where exactly in the entire pipeline failed. It is because of certain settings in the proxies or the endpoints, such as no common cipher suites available in very strict configurations between the client and server endpoints, or minimal TLS version that one party insist on having that the client doesn’t support?

If you just want to touch superficially on the topic, that would get you somewhere.
If you need to work with security folks to circumvent certain security vulnerabilities when these are reported across the industry, knowing these knowledge are necessary. Of course we don't expect junior IT folks to know these, but if you wanted to move up the chain to be someone whom may liaise with security folks, then you will need to know some of these stuffs.

 

[peterchan75]

None of the codes above will remove you from the burden of getting x509 certs properly provisioned.

When to use and when not to use self-signed certs, when you can be your own private CA and issue out certifications. How multi domains, wildcard domains certs work. When handshake failed for whatever reason, where exactly in the entire pipeline failed. It is because of certain settings in the proxies or the endpoints, such as no common cipher suites available in very strict configurations between the client and server endpoints, or minimal TLS version that one party insist on having that the client doesn’t support?

If you just want to touch superficially on the topic, that would get you somewhere.
If you need to work with security folks to circumvent certain security vulnerabilities when these are reported across the industry, knowing these knowledge are necessary. Of course we don't expect junior IT folks to know these, but if you wanted to move up the chain to be someone whom may liaise with security folks, then you will need to know some of these stuffs.

I am not even a junior IT.

 

[davidktw]

I am not even a junior IT.

No you are not.