DevOps

Day 3 of DevOps learning 🚀 :
👉 SSL/TLS(Transfer Layer Security) certificates are used to create secure HTTPS connections between a browser and a web server. HTTPS is the secure version of HTTP, which is a protocol that sends unencrypted data to a web server. SSL/TLS certificates are required for HTTPS web addresses.

👉 Server-side encryption (SSE) is a feature that encrypts data while it's being stored or in transit. Here's some information about SSE in different services:
AWS:
-- For AWS services like S3, it's recommended to use HTTPS endpoints to ensure data is encrypted in transit. All AWS services, including S3, provide HTTPS endpoints.
DynamoDB:
-- When using an AWS SDK to interact with DynamoDB, data is encrypted in transit over HTTPS, decrypted at the DynamoDB endpoint, and then re-encrypted before being stored.
(With many services available, I'm currently focusing on just two for now).

👉Data at rest encryption (DARE) is a cybersecurity method that protects data that is stored in databases and not being moved through networks. HTTPS is a secure way to encrypt data in transit, but it does not encrypt data at rest.
- Benefits:
i. Prevents unauthorized access
ii. Reduces the risk of data loss or theft
iii. Reduces the attack surface.

👉Data at transfer encryption:
- In HTTPS, data is encrypted to protect it during transfer between your browser and a website. The process involves:
-- TLS/SSL Handshake: The browser and server securely exchange keys using public and private keys (asymmetric encryption).
-- Session Key: After the handshake, a session key is created for fast, secure communication (symmetric encryption).
-- Encryption: All data transferred is encrypted using this key, keeping it safe from eavesdropping.
-- Integrity: Data is also checked using hashing to prevent tampering.
("As a beginner, I've covered a few topics so far, but I plan to cover everything in the future.")