Lesson 12: Unencrypted Communication
Aayush-C
Unencrypted communication is a vulnerability you might face if you still use HTTP over HTTPS to transfer user data (client to server). If that is the case your users' data may become a part of a man-in-the-middle attack. We learned to do a basic man-in-the-middle attack by using a network sniffer and protect ourselves by using certificates to ensure HTTPS data travel.
Link in the video: Let's Encrypt is a quick and easy way to install one. The project - sponsored by Mozilla, Facebook, and the Electronic Frontier Foundation - https://letsencrypt.org/ What is TLS? - https://www.acunetix.com/blog/articles/tls-security-what-is-tls-ssl-part-1/?utm_source=hacksplaining&utm_medium=post&utm_campaign=articlelink Configuring HTTPS in Django. - https://docs.djangoproject.com/en/3.1/topics/security/#ssl-https
75894465 Bytes