哪些书可以帮助我了解有关 SSL/PKI 的所有知识？
由于 SSL 是安全互联网的支柱（现在技术上称为 TLS），我应该阅读哪些好书来了解它的各个方面？
我想我还需要学习一些数学、一些 PKI 书籍、加密货币和系统管理书籍。由于这不是完整的列表，我也有兴趣听听您认为明智的学习内容。
Since SSL is the backbone of the secure internet, (now technically called TLS), what are some good books I should read up on to understand all aspects of it?
I suppose I'll need to learn some math, some PKI books, crypto, and Sysadmin books as well. Since that isn't a complete list I'm interested in hearing what you think is wise to learn as well.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
以下是有关该主题 (SSL/TLS) 的四本好书的列表：
SSL 和 TLS：理论与实践
SSL 和 TLS：设计和构建安全系统
SSL 和 SSL TLS：保护网络安全的要点
OpenSSL 的网络安全
以下是一些有关 PKI 的好书：
了解 PKI：概念、标准和部署注意事项
PKI 规划：部署公钥基础设施的最佳实践指南
公钥基础设施：构建可信应用程序和 Web 服务
PKI：实施和维护管理电子安全
当谈到密码学时，您不能做得比以下更好：
现代密码学简介：原理和协议
应用密码学：C 语言协议、算法和源代码
密码书：从古埃及到量子密码学的保密科学
密码学工程：设计原理和实际应用
Here is a list of four good books on the subject (SSL/TLS):
SSL and TLS: Theory and Practice
SSL and TLS: Designing and Building Secure Systems
SSL & TLS: Essentials Securing the Web
Network Security with OpenSSL
Here are some good books on PKI:
Understanding PKI: Concepts, Standards, and Deployment Considerations
Planning for PKI: Best Practices Guide for Deploying Public Key Infrastructure
Public Key Infrastructure: Building Trusted Applications and Web Services
PKI: Implementing & Managing E-Security
And when it comes to cryptograpy, you can't do much better than:
Introduction to Modern Cryptography: Principles and Protocols
Applied Cryptography: Protocols, Algorithms, and Source Code in C
The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography
Cryptography Engineering: Design Principles and Practical Applications
就密码学而言，这是最好的：
应用密码学：协议、算法、和 C 语言源代码
您将从基本构建块开始学习所有内容。
As far as cryptography goes, this is the best there is:
Applied Cryptography: Protocols, Algorithms, and Source Code in C
You will learn all there is from the basic building blocks upwards.
SSL 和 TLS：设计和构建安全系统，Addison-Wesley，2001 ISBN 0-201-61598-3：非常详细。
除了书籍之外，根据您喜欢的学习方式，如果您喜欢实践经验，您可以阅读 JSSE 参考指南（在线，Java 文档的一部分）并尝试一些基于此的教程。浏览其他库的文档也是值得的（例如 Mozilla 的 NSS 或 OpenSSL）。
如果您想了解哪些主题是前沿的，请浏览 IETF TLS 邮件列表档案（当然也可以订阅它）并关注讨论。
查看 BouncyCastle（Java 或 C# 语言）的示例或单元测试也很有趣。
您还可以将其与使用 Wireshark 查看现有应用程序使用 Wireshark 发生的情况结合起来（您不一定总是即使您拥有服务器的私钥，也能够解密通信，因为它也取决于密码套件）。
SSL and TLS: Designing and Building Secure Systems, Addison-Wesley, 2001 ISBN 0-201-61598-3: very detailed.
Aside from books, depending on how you like to learn, if you like practical experience, you could go through the JSSE Reference Guide (online, part of the Java documentation) and try a few tutorials based on this. Going through the documentation of other libraries is worth it too (e.g. Mozilla's NSS or OpenSSL).
If you want to see what topics are cutting edge, go through the IETF TLS mailing list archives (or subscribe to it, of course) and follow the discussions.
Going through the examples or unit tests of BouncyCastle (in Java or C#) can be interesting too.
You could also combine this with looking at what happens with existing applications using Wireshark (you won't necessarily always be able to decipher the communication, even if you have the server's private key, since it depends on the cipher suite too).