-
HTTPS on localhost with mkcert, without certificate warnings
mkcert creates a local CA, installs it in the system and browser trust stores, and signs a certificate for localhost. Measured: with the CA in --cacert, curl returns HTTP 200 and ssl_verify_result 0 in 0.006 s; without it, it fails with unable to get local issuer certificate.
-
What happens in a TLS handshake
A TLS 1.3 handshake fits in one round trip: the client sends a ClientHello with a freshly generated public key, the server answers with its own, and everything after that is encrypted. I measured 778 bytes on a full handshake and 241 on a resumed one.
You reached the end. Every post is here.