Dark Matter eLiquid

Enjoy the wonderful flavor of our latest VapeSafe eLiquid - Dark Matter.

Dark Matter tastes like German chocolate cake. For those of you who have not had the fortunate to try a piece German chocolate cake recently, this is a great way to experience the flavor without getting any of the calories. German chocolate cake is a layered cake filled and topped with a coconut-pecan frosting. Traditionally sweet baking chocolate is used for the chocolate flavor in the actual cake. The robust filling and topping is a caramel made with egg yolks and evaporated milk. Once the caramel is cooked, coconut and pecans are stirred into the mixture. Finally, rich chocolate frosting is spread around the sides of the cake to hold in the filling.

Dark Matter eLiquid by VapeSafe captures the essence of German chocolate cake. Dark Matter eLiquid delivers plumes of vapor and rich chocolatey flavor that you'll want to enjoy again and again. Try Dark Matter today!

Technology Information:

SSL and TLS: Designing and Building Secure Systems

Description

(Pearson Education) Teaches the reader a firm grasp of the protocols of Secure Sockets Layer and Transport Security Layer Internet security protocols. Delivers the essential details about how SSL/TSS is supposed to behave, and crucial information for designers, security architects, and software engineers. Softcover. DLC: Computer networks--Security measures.

Reviews

Rating: 5 / 5
Date: 2009-02-06
Summary: "Excellent description of why, what, how of SSL/TLS"

"SSL and TLS" is an excellent introduction of what the issues are that drive the need for security and cryptography. Eric explains the issues concisely and in an interesting way, then shows how SSL/TLS address the needs. For one who needs to know what this area is all about before being thrown into a programming project, this is a great resource.

---

Rating: 4 / 5
Date: 2008-12-19
Summary: "Delivers exactly what it promises"

I was very, very impressed by this book. The author clearly knows what he's talking about (he's also the author of several RFC's, including RFC 2818 that specifies HTTPS). He knows SSL inside and out, and after reading this book, you will, too. This book examines SSL mainly from an implementor's/programmer's perspective (and includes code samples that integrate with OpenSSL and the author's own "PureTLS" library for java). Aside from just specifying the details of SSL as well as the details of how it's integrated with HTTP and SMTP as case studies, the author goes into fine detail on the pitfalls of SSL, what it's good at, what it's not so good at, how it could be improved, and why certain hard-to-understand features exist.

I have only two complaints about this book. The first is that there is almost zero discussion on certificates. Although certificates are one of the most complex aspects of SSL (which relies heavily on them), this 400+ page book dedicates less than 10 pages to discussing certificates. Surely he could have sacrificed a few of the 40 pages he devoted to in-depth SSL performance statistics (does anybody really need that much detail?) to talk about how certificates are represented in SSL? He talks a bit about certificates, but in a fairly abstract way - you'll walk away knowing that they exist, and that you should a) check their distinguished name against the server domain name and b) limit your certificate chain depth to 1, but you won't really know how to do either of those things.

The second is that he uses an (excellent) tool he wrote called 'ssldump' (similar to tcpdump) to show details on SSL's wire-level record formats, but doesn't go into any detail about how he got the tool to generate the displays in the book. I still can't figure out, for example, how to get ssldump to show the contents of a certificate (I can get it in hex format, but he shows it parsed in the book), or how to determine the private key from my own self-signed certificates to use for decrypting the output even after reading the (sparse) documentation provided with ssldump. A bit of detail on how the illustrations were generated would have been nice (perhaps even with samples of the openssl s_client and s_server programs used).

Still, the book was excellent, and I can't imagine a better overview of SSL/TLS. I've slogged my way through RFC 2246 and come away with a muddied understanding of what SSL is all about - but after having read this book, I'm troubleshooting SSL problems from Apache logs.

---

Rating: 5 / 5
Date: 2007-09-04
Summary: "An absolute must-have for anyone starting out with SSL"

The text is very well-written and develops the ideas exceptionally beautifully. At the very beginning, the skeleton of the SSL protocol is developed through an example - the "Toy Security Protocol". Obviously, the book is useful for practitioners, not cryptography students, but it has just enough material to give its intended audience a sense for the black art behind the stuff!

Besides introducing the specifics of SSL, there are other useful material -- one example is chapter 11 ("Contrasting Approaches") which fine-tunes one's understanding of why/when one uses SSL. Other impressive examples are chapters that discuss performance issues and programming pitfalls. There are also lots of historical notes and comments that add meaningful context to the subject material.

I had already read 2 (and a half!) other books on this subject. Early on while reading this book, I realized I have found the "definitive" guide!

---

Rating: 5 / 5
Date: 2007-02-08
Summary: "A great book, still very relevant"

This author seems to know everything, every little detail and background. All those confusing security terminologies are well explained.

---

Rating: 5 / 5
Date: 2005-08-18
Summary: "fantastic"

Not only is this an extremely useful book on explaining SSL/TLS, but its comparisons of those protocols to other security protocols is priceless. For example, the concise explanation of IPSec is far better than entire other books devoted to the topic. I can't recommend this highly enough!!