Lesson Plan

• Describe the three core security goals of SSL/TLS (confidentiality, integrity, authentication).
• Explain how symmetric and asymmetric encryption are used during the TLS handshake.
• Identify the main messages and steps of a TLS handshake, including key exchange and session‑key generation.
• Summarise the purpose and components of digital certificates and the PKI trust model.
• Evaluate why forward secrecy and the latest TLS version are essential for secure communications.

• Projector and screen
• Whiteboard and markers
• Handout with TLS handshake diagram
• Printed sample X.509 certificates
• Laptops with internet browsers
• Worksheet for key‑exchange calculations
• Quiz cards for exit ticket

Begin with a short video clip showing a data breach caused by unencrypted traffic to hook students. Ask them what they already know about encryption and why secure connections matter. Explain that by the end of the lesson they will be able to describe the SSL/TLS process, its cryptographic components, and how digital certificates establish trust.

1. Do‑Now (5') – Quick quiz on confidentiality, integrity, and authentication.
2. Mini‑lecture (10') – Overview of SSL/TLS goals and underlying cryptographic concepts using projector.
3. Handshake walkthrough (15') – Step‑by‑step animation of a TLS 1.3 handshake; students label a printed diagram.
4. Certificate activity (10') – Small groups examine sample X.509 certificates, identify fields, and map the chain of trust.
5. Forward‑secrecy demo (5') – Compare RSA vs. ECDHE key exchange with a brief simulation.
6. Check for understanding (5') – Exit ticket: list three handshake messages and explain their purpose.

Recap the main steps of the TLS handshake, the role of certificates, and why forward secrecy matters. Collect the exit tickets to gauge understanding, and assign a short homework task: read a current article on TLS 1.3 improvements and write a paragraph summarising one new feature.