401 Reading 9 - marsecguy/reading-notes-cyberops GitHub Wiki

Public Key Infrastructure (PKI)

1. Name the three main components which make up PKI.

   • Public Key Cryptography
   • Private Keys
   • Public Keys

2. How would you explain, to a non-technical friend, the role PKI plays in protecting traffic between your browser and a web server.

   • PKI uses encryption technology to turn data into code and then lock it up with digital keys that can only be unlocked by the person who has the correct digital key on the other side. These keys are verified by a third party guarantor.

3. What is the main weakness of the PKI architecture?

   • Any certificate authority can sign a certificate for any person or device, so the issuer may, themselves, be the "bad guys".

Source: SSH