MEPX
Chapter 6 of 10All chapters
  1. 1Who is actually after you
  2. 2Passwords
  3. 3Two factor authentication
  4. 4Phishing and social engineering
  5. 5Updates and patching
  6. 6Encryption
  7. 7Networks and public wifi
  8. 8Malware and ransomware
  9. 9Access and least privilege
  10. 10When something goes wrong

Chapter 6 of 10

Encryption

What the padlock does and does not promise.

In transit and at rest

HTTPS encrypts traffic between your browser and the server, so nobody on the network can read or alter it. Encryption at rest protects stored data if a disk or backup is stolen.

  • The padlock says the connection is private, not that the site is honest.
  • End to end encryption means even the service provider cannot read the content.

Public keys

A public key encrypts and a matching private key decrypts, which lets strangers exchange secrets safely. Certificates use the same maths to prove a server is who it claims to be.