Bulletproof TLS and PKI, Second Edition: Understanding and Deploying SSL/TLS and PKI to Secure Servers and Web Applications

I am using it to explain issues in PKI and why we need to keep an eye out for some issues.

Let's face it, configuring SSL/TLS and PKI is complicated, both in terms of security and performance optimization. Most of us don't have the time to really dig into the subject properly. Thankfully, Ivan has done all the hard work and put the important parts into this book. As someone who already had the first version, let me explain what's changed:o The TLS 1.3 chapter is brand newo The configuration guide has been completely rewritteno Most other chapters have seen heavy updates and rewritesI'm usually hesitant buying tech books on topics that change so rapidly, but in the case the ebook version will be updated regularly which makes this the definitive book on SSL/TLS.

Cryptography, like many areas, has its own confusing jargon and acronyms. This book gently introduces the concepts and uses them so they are understandable. The author is on the board of "Let's Encrypt" so freeware certificates are well covered.The index is a bit weak and it could use a glossary. I highlighted all the definitions and that helped.

I've been using this series for years and have always appreciated the updates in new editions, clear explanations, and easy to apply logic.