Table of Contents

Preface Part I: SSL/TLS and PKI 1. SSL, TLS, and Cryptography 2. Protocol 3. Public Key Infrastructure 4. Attacks against PKI 5. HTTP and Browser Issues 6. Implementation Issues 7. Protocol Attacks Part II: Deployment and Development 8. Deployment 9. Performance Optimization 10. HSTS, CSP and Pinning Part III: Practical Configuration 11. OpenSSL Cookbook 12. Testing with OpenSSL 13. Configuring Apache 14. Configuring Java and Tomcat 15. Configuring Microsoft Windows and IIS 16. Configuring Nginx

About the Author

Ivan Ristic is a security researcher, engineer, and author, known especially for his contributions to the web application firewall field and development of ModSecurity, an open source web application firewall, and for his SSL/TLS and PKI research, tools and guides published on the SSL Labs web site. He is the author of two books, Apache Security and ModSecurity Handbook, which he publishes via Feisty Duck, his own platform for continuous writing and publishing. Ivan is an active participant in the security community and you'll often find him speaking at security conferences such as Black Hat, RSA, OWASP AppSec, and others. He's currently Director of Application Security Research at Qualys.