Feds and intelligence agencies use taxpayer dollars to perform dragnet surveillance of Internet traffic. Using SSL makes their job hard, and increases the cost of intercepting your traffic. TLS makes it even harder. This talk starts with a very brief intro to encryption, moves into the history of SSL and why you shouldn't use it, and finishes with coverage of its successor TLS. Current best practices on implementing TLS, including recommended ciphers and browser compatibility will be discussed. Lesser known gotcha's such as weak Diffie-Hellman and “imperfect†forward secrecy will also be covered. Trust the maths, not the programmer.