Backend
How HTTPS works: what the padlock actually proves
The padlock proves the line is private and the name is real, and has never had an opinion about whether the site is honest — which is why a phishing page gets exactly the same one.
How it actually works
The engineering questions you get asked, and the bugs you actually hit. Drawn, one mechanism at a time, in the order the videos ship.