So the approach to overcome this performance problem with the authority is to use what's called public key certificates or simply certificates. And this is maybe, this picture may be a little bit confusing or it's hard to compare with the previous one, we'll explain why. Note the number of messages. It looks similar. We have user A, user B, an authority, just call it a different name. Here we have user A, B, an authority. In the use of the public key of the authority, every time A wants to talk to B, there's a request to the authority and a response in message one and two, and B must send a request to the authority and get a response in four and five. So every communication between pairs of users require messages to the authority. With a certificate authority, that's not true, and that's why this diagram is a little bit misleading. We'll redraw it in a moment. Whenever A wants to talk to B with a certificate authority, the only two messages we need to send are one and two. The other messages drawn on this diagram are exchanged in advance manually. So maybe you note on your slide that the message from A to the authority and the response. So make a note now on your handouts so you don't forget when you study for the exam. The message from A to the authority and the response, and B to the authority and the response are manually exchanged. They not automatically sent across the network. Draw on your handouts. If you didn't bring your handouts, you'll get this wrong in the exam. So note carefully that one and two are sent across the network, whereas with the public key authority, all seven messages are sent across the network. And if you can recognize the difference there, you'll see with a public key authority, every time two users want to communicate, some messages go to the authority. That's a performance problem. With a public key certificate and certificate authorities, every time two users want to communicate, only messages go between those two users. Nothing goes to the authority. And that's the advantage here. It's a performance and convenience benefit. There's no additional security provided, so it's an improvement on performance. So how does it work? Why do we only need to exchange between A and B, not between the authority? It deals with what we exchange manually in advance. I'll try and draw the diagram again, but highlight which ones are manually exchanged and which ones are automatic. So initially, I will highlight what's known and what's assumed up front. So we have user A and user B want to communicate. And we have an authority, I'll denote as the certificate authority or simply CA for short. The certificate authority is CA in this case. The manual exchange is that if I'm the authority and you're the users, we said before, you come to me, you come to my office and give me your public key. Same thing happens here. The user goes to the authority and gives them the public key. But what's different compared to the public key authority, the certificate authority issues the certificate. So we'll see the structure of that certificate. So the manual exchange is that A goes to the authority and gives, shows the public key of A to the authority. So we'll record what's known, let's be clear that A knows its own public key and its own private key, B knows its own public key and private key. They have their own pairs. So the authority has its own pair. And in the manual exchange, A gives its public key to the authority and the CA, the authority gives its public key to the user A. And similar, there's a manual exchange between B and CA. This is the same as with the public key authority, there's nothing different yet. Each user goes to the authority, they exchange their public keys. Must happen in advance. But also in that exchange, when the authority gives A its public key, the authority gives A another piece of information called the certificate of A. So I'll simply list that as CA here. The authority issues the certificate to user A. A certificate is like a document that is signed. So the document in this case is the public key of user A and it's signed by the authority. Similar, when B goes to the authority and they exchange public keys, the authority issues the certificate to B, CB, we'll need some space to write it down. What is inside the certificate is important. And it's on the slide, maybe we'll look at that. This is the issuing here. So again, this is the manual exchange, A gives its public key to the authority. The authority issues a certificate to A. CA here. What is the certificate? In the general form, it is the public key of that user, the public key of A, including the identity of the user saying, this public key belongs to this user, a time stamp, this public key belongs to this user and it's valid for this period of time. So maybe two time stamps. This public key is valid from today and it will expire in one year's time. And importantly, it's signed by the authority, the signature of the authority. We encrypt with the private key of the authority. That's the certificate of A and similar, the certificate of B is the public key of B signed by the authority. We'll write them down. I'll try and remember the same notation. The time stamp, T1, the identity of A, the public key of A, signed with the private key of the authority is the certificate of A and similar for B. Different time stamp, it's issued at a different time. I can squeeze it in the ID of B and the public key of B. This information is known by the users after the initial manual exchange. It's similar to what's on the slide. Any questions so far? Welcome to those that came late, missed the first half. So now the automatic exchange. When two users want to communicate, they don't have to contact the authority. They communicate directly by sending each other their certificate. A sends a message to B containing its own certificate and B responds. So that's the steps in this case. And I try to highlight in this diagram, whenever any two users want to communicate, there's only two messages exchanged and those messages don't involve the authority. And compared to using a public key authority, that's where the benefit is here. When we have many users, there's very little load on the authority. It's just directly between the users, so the performance is not such a problem. Does it provide the same security as the public key authority? Well, how do we use the certificate? When B receives the certificate of A, the certificate of A is signed by the authority. When you receive a certificate that is signed by someone, you verify. So when B receives the certificate of A, it verifies using the public key of the authority. And there should be a space down here, but B knows the public key of the authority. We obtain that in the manual exchange. So when B receives the certificate of A, it verifies using the public key of the authority that that certificate has not been modified. It's valid. It was signed with the private key of the authority. It should successfully decrypt with the public key of the authority. Once we verify, we now know the public key of A. And similar when we send back CB, CB was signed by the authority. It contains B's public key. When A receives that certificate, A verifies using the public key of the authority and finds the correct public key of B. So the steps here, we verify as we receive a certificate. B verifies CA. And when B sends back CB, when A receives CB, it also verifies. Whenever we receive a certificate, we should verify to check that it's valid. Questions on using a certificate authority so far. The difference between public key authority and certificate authority, make sure you're clear on that. And why a certificate authority provides the same security. Remember the aim is to get each other's public key. And that aim is achieved after these two steps. B receives the public key of A. And they know it's A's public key because it was signed by the authority. And we trust the authority. We already have its public key. Similar, A receives the certificate of B. The certificate of B contains the public key of B. And A trusts that received certificate because it trusts the authority. And hence we have achieved our aim. Okay, that doesn't mean it's okay that you can see the picture. Any questions? So the certificate authority provides better performance than the public key authority. Not better security, better performance. There are no exchanges with the authority. T is a timestamp. We'll see some specific examples shortly. But it may be this public key is valid for this period. In fact, it may not be just one value. But it's something to indicate when this certificate expires. Like I issue you a certificate signing that it's your public key. But I only issue it valid for one year. If you want to have a certificate for longer, you need to get it reissued or a new one issued. We'll see that's how it's used. ID is something that identifies that user in the system. It depends on where we use certificates. It could be some address of the computer. It could be some identifier of the user in the system. We'll see when it comes to websites, the ID is a domain name. www.facebook.com is the ID used for the Facebook web server. And public key, what is the public key? Well, that may be an RSA public key or other algorithm. Certificate authority is because of this performance advantage across a public key authority are widely used today. And the primary means for secure communications in the worldwide web. HTTPS makes use of digital certificates and other security systems. So what is a certificate? Well, in general, it's the public key of a user and its ID. A timestamp usually indicating a period that this certificate is valid for or an expiration date. We'll see in practice it's usually a start date and an expiration date, two dates, two timestamps. That's the general approach. In practice, there are specific formats. So when we use software to exchange certificates, our computers need to agree upon a format. And the widely used format is referred to as X509. So there's a standard that says certificates should be structured in this way. And they're used in many different network applications, especially in web security. So I'll show you some examples of real certificates and we'll see the format. But remember that key information, public key, identity, some timestamp, and signed by an authority. In practice, when we sign something, what do we do before we encrypt? Before we encrypt to sign something, what do we do with a message? When we sign a message in this diagram, or this slide I say, we encrypt using the private key of the authority, our message. In practice, we don't encrypt immediately, we do something first. What do we do first? We want to make it maybe smaller, the message. Take a message, we don't just encrypt it, we do something with it first. Any ideas? We started it in the topic on authentication or the topic before this. What was the topic before? The topic, look in your lecture slides. We calculate a hash. If we calculate a hash of the message, we get a short value. And then encrypt that short hash value. So even though in these examples we write, we sign by encrypting using private key of the message. In practice, and we'll see when we look at some examples, we take a message, we calculate the hash of that message, and we get a short hash value, short relative to the message, and then simply encrypt the hash value with the private key. So real signature in practice is an encrypted hash value. But it's the same security as encrypting the entire message, it's just more practical to encrypt the hash value. So we'll talk about X509 certificates, the format, and then I'll show you some examples and see how they're used. X509 is the name or the number given to the standard, widely used in HTTPS and other systems. The format is what's included inside the certificate. What's the format of the ID, of the public key and so on. And the fields, the main fields are listed here. The standard has gone through different versions. So inside the certificate we indicate what version we're using. There's a serial number issued to the issuer. The issuer is who signs it, the authority in this case. So they have a serial number. What algorithm are we used for signing? Signing involves a hash algorithm and a public key encryption algorithm. Which ones are used need to be specified. The issuer is the entity that signs. The subject is the entity who has their public key stored in the certificate. So someone issues a certificate to some subject. So inside the certificate is some name and identifier of the issuer. The subject's name and identifier. There's two timestamps normally to indicate when this certificate is valid form and to, when it expires and when it starts. And the public key information is included. So what algorithm is the public key encryption using? Any parameters for that algorithm and the actual public key? So the key is the important thing in the certificate. And then the signature. And the signature is the hash of all the data encrypted with a private key. So we'll see through examples what they look like. So when you access a website, for example, we, on the course website, are we using HTTPS? No, we're not. But when we log in, if you know the padlock, the padlock up the topic, my browser, and we know that it says HTTPS here. HTTPS, and we'll see it in the next topic, which is a last for this course, we'll see that that uses certificates to provide some level of encryption. So we just want to look at the certificates for now. Because we would like to communicate between my browser and the web server. And to do that communication securely, we need to encrypt, and we need to exchange a key, and we use public key crypto to do that. So let's look at the certificate. If we click on here, we see some more information. We have a secure connection, and let's get some more information. And we find and we can view the certificate. And we'll look at some of the details. But in summary, there's a certificate here. We'll look at the details. The certificate was issued by one organization and issued to some subject, issued to and issued by. Who is the subject in this case? Can anyone see? What's the idea of the subject? Those at the back may want to come closer, it's hard to see.  You can come up here and you join him. Then you can see much clearer. Who is the subject in this example? What is the idea of the subject? Anyone want to guess? A guess? S-I-T is a subject more precise in this case. Star.s-I-T.tu.ac-t-h. Issued to, this certificate is issued by someone to the subject. So the subject is S-I-T, but more precisely, the identity is not S-I-T. The identity is a domain name. We'll hear a special case, not a full domain name, but it uses a wildcard. Meaning this certificate applies to any domain name that ends with S-I-T.tu.ac-t-h. I-C-T, I-T, reg, www, and so on. The same certificate is used for a number of different domain names. That's called the common name. In the standard, that field is the common name. The identity of the subject. The identity of the authority that issued the certificate is listed here, this Komodo RSA domain validation secure server CA. So there's the identity of the authority. So in short, Komodo RSA issued a certificate for the S-I-T domain. That certificate begins on the 25th of March. This year, and it expires in August, sorry, July next year. So this is like the time stamp. But in fact, there are two time stamps, the start and end time. And in web browsing, your browser will check the validity of this certificate. When it receives the certificate, it would check if the current date is within the period of validity. And if it's not, for example, if today's date was in past the expiry date, then your browser would at least present a warning or maybe a security error saying you've received a certificate which is invalid. And remember, a certificate is the public key of the subject. It's the public key for S-I-T signed by the authority. And there's a fingerprint, which is the hash values of this that allow us to quickly verify that. So to see the details, we'll zoom in, see the other fields in here. And we'll see, in fact, there are three certificates shown in my browser here. There's a hierarchy. But we'll come back to those other two first. We'll first look at the certificate that belongs to star.sit.tuacth. And this certificate contains a number of fields. We see it starts with the version. The standard has gone through different versions. This is version three of the standard. It has a serial number. So this certificate has this number issued to it, so like a random value for each certificate. The algorithm used for the certificate, for the signature. Remember the signature? We take a hash of the message encrypt with a public key algorithm. The hash algorithm used was char256. The public key algorithm used was RSA. The certificates support other algorithms, so you don't have to use this pair. This is common in this case, but you can have different hash algorithms and different public key encryption algorithms. Who issued the certificate? Komodo RSA, Domain Validation Secure Server CA. You'll see that Komodo is a company that won rollers to issue certificates. And you'll see that they have a number of different certificates we'll see shortly. The other fields are just some optional organization units and location address fields. So the common name CN there is like the ID when we write in our shorthand. Time stamps, not valid before this date and time, not valid after this date and time. The subject, who is it issued to? And here we have a common name. The ID is a domain name which ends with the SIT domain. So it covers a range of domain names. Sometimes we would see a specific domain name. Sometimes we see a wildcard, this star value. So in web security, the common name or the ID is always a domain name. And the actual public key, that's the important thing in the certificate, what is the public key? Well what algorithm is used for the public key, RSA? What is the public key? Remember when you generated your public key, you generate in RSA E and N as the public key. N is the modulus, E is the public value. Those values are given here. The modulus of those bits and I can't scroll down very easily. Down the bottom, E, the exponent, this common value of 65,537. So when SIT generated their key pair, they generated this value of N and E. That was their public key. They submitted this public key to the authority, Komodo, the company. And the company Komodo issued this certificate to SIT. That's the main information so far. The certificate contains some extra extension information which is, we haven't drawn in our examples, some identifiers. You can have certificates revoked. A certificate is issued, it's valid from this date to this date, but maybe something goes wrong and a key is revealed so we need to revoke a certificate. So there are methods for checking whether the certificate is revoked or not. Certificate revocation lists, but that's extra information. The last thing, again, the signature is the hash of all the other fields encrypted using a RSA key. The signature is given here. So these bits, or the hex vote is here, if we take all the other fields, calculate a hash using SHA-256 of all those other fields and then encrypt with a private key, we get these bits, the signature. Which private key? Which private key was used to get this signature value? Whose private key was used to get that signature? The signature is the hash, encrypted hash. The private key of the authority, in this case, Komodo RSA domain validation, that company, that specific key of that organization. So the private key of the authority was used to encrypt the hash of all the other fields and the result is these bits here. That is the signature. This is the certificate of SIT. Let's just note it down and we'll show you some other values. We'll see that there are multiple certificates. And rather than writing down all the values, I'll write a summary. There are many fields there. I will not write them all down, but the ID of SIT was in there. The public key of SIT, there was a timestamp when it was valid from and to. I'll just denote as T1. And then there were some other fields which were not list, like the version, the algorithm used. And then at the end, we attached the signature which is we encrypt using the private key. Whose private key? The authority's private key. In this case, the private key was that of Komodo. Komodo. And I'll just go back. The actual name, which we're not right. Komodo RSA domain validation, secure server CA. I'll write Komodo D, because we'll see there's another one in a moment. Komodo D and the hash of what? We take the ID of SIT, the public key, the timestamps, all those other fields. And all of those fields are used in the hash algorithm. Then that hash value is encrypted with the private key of Komodo, the domain validation server. And that becomes that certificate of SIT. Some of those values, the ID we saw was actually star dot SIT, a domain name or a range. The public key, we're not right the value, but was a 2048 bit RSA key. The timestamp was actually two timestamps, from and to time. So this was a certificate issued to SIT. When I accessed the ICT web server to log in, my browser contacted the ICT web server, and the web server sent me this certificate. What did my browser do next? Verify, I verified the certificate. Whenever someone sends you a certificate, you verify it. We check. Is it valid? We check the timestamps. Is it within the period of validity? But more importantly, how do we verify? Use the public key of the authority, in this case, who? Komodo domain validation server. So we need to verify using the public key of the issuer of the authority. So, how did my browser have the public key of Komodo? Maybe it was manually exchanged outside. So, automatic exchange was the certificate of SIT to learn the public key of SIT, but that was issued by an authority, and we've said so far that, well, we must manually exchange to get the authority's public key. It may not have to be manually exchanged. There's a word. You can securely connect to SIT and get this certificate. Check and you'll see it on your phone. Don't worry about your scores for other courses. They won't help you in this course. So, to verify this, my browser needs the public key of Komodo. Where do I store public keys now? In fact, a certificate is just a verified public key. A certificate contains the public key issued by someone else. So, if we go back to my browser, this was the certificate for SIT. My browser also has the certificate for Komodo domain validation. So, I have a second certificate in my browser. The subject of that second certificate is Komodo RSA domain validation secure server, the issue of mine, and the issue of the second certificate is another identity. Same company, slightly different name. Komodo RSA certification authority. We actually have a hierarchy. Okay, we may not just have one authority, we may have multiple authorities. And we see that in this example. So, let's write down that second certificate. Not in full, but we'll see that there's also a certificate of Komodo domain validation, Komodo D, which contain the ID. And so on, I'll not write them all down. The public key, the public key of Komodo, encrypted with the private key and the hash of all of that. Whose private key was used to encrypt Komodo's certificate? It's a bit confusing because Komodo issued it as well. The subject I'm calling Komodo D, Komodo domain validation secure server, the issuer is Komodo certificate authority. So, let's call that Komodo CA, just to be distinguished between them. Note the slightly different names here. Komodo D, and this one's different, the private key Komodo CA. Both of those certificates are stored by my browser. How do I know that that second certificate, the Komodo D, is trustworthy? Do you trust the second one? When we say trust, we mean it must be able to verify it. If the second certificate was encrypted with the private key of Komodo CA, to verify we need the public key of Komodo CA. The certificate of SIT was issued by Komodo D. To verify that, I need the public key of Komodo D. I have the public key of Komodo D in the certificate of Komodo D. To verify that one, I need the public key of Komodo CA. I have the public key of Komodo CA in a third certificate. Here's the third certificate. It's the certificate of Komodo CA. The subject is Komodo CA. Who is the issuer? Who is the issuer? Let's write it down and see. I know it's hard to see. Let's write down what we have so far. Who issued this third certificate? Which Komodo? We've got two different subunits, really. Let's have a look. The subject is Komodo RSA Certification Authority, Komodo CA, who issued this, the same organization. That is, they issued it to themself. This is called a self-signed certificate. This is a certificate of Komodo CA. The public key of Komodo CA signed by Komodo CA. They signed it themself. Let's write it down. So the private key was used to sign this was that also of Komodo CA. It's the C, and we've reached the top level of the hierarchy because to verify this certificate, we need the public key of Komodo CA. Well, the certificate contains the public key of Komodo CA. That's why we say it's a self-signed certificate. The problem is, do we trust it? Why do we trust it? What does trust mean with certificates? Trust means we can verify with a public key. But at some point, we must stop at the top level. At some point, we must implicitly trust someone. And that's what we have here. This is called a RUD, a RUD level authority. We trust Komodo CA. That is, we have their self-signed certificate. We trust it is the correct one. Now, since we trust this certificate, we have the public key of Komodo CA. We can verify the next certificate. The next certificate of Komodo D is signed by Komodo CA. We trust Komodo CA. We have the public key of Komodo CA. So now we trust Komodo D because we've verified that their certificate is correct. If we trust Komodo D, we can verify SIT's certificate because SIT's certificate is signed by Komodo D. So we see some chain of trust here. SIT has a certificate issued by Komodo D. Komodo D has a certificate issued by Komodo CA and Komodo CA has a self-signed certificate that we implicitly trust. We must trust that. If we keep going in the hierarchy, at some point there must be a route of that hierarchy what we must trust. That's called a RUD authority. So those chains can be quite long. It's not just two levels. Any questions on the role of certificate so far? Very important because used every day for web security. And other application security. Okay, all right. Yeah, good. Let's go back to our browser. We can summarize that chain of trust. Some notation we'll commonly see is this. Actually, we'll make it easier to write. The chain of trust, we can summarize like this. SIT, we'll see on the slides this notation is used. The certificate of SIT was issued by Komodo D. And the certificate of Komodo D, just some shorthand notation to show the certificate, was issued by Komodo CA. And the certificate of Komodo CA was self-signed. Implicitly, my browser trusts the self-signed certificate. If I trust this certificate, then I can verify the next one in the hierarchy. And therefore trust the second one. And if I trust Komodo D, I can verify SIT and trust SIT. So we build a chain of trust. So the question, a good question, why do we have multiple levels here? Why not just have a certificate of SIT and Komodo CA? First, where does the certificate of, why do I trust Komodo CA? I trusted SIT because I trusted Komodo D. I trusted Komodo D because I trusted Komodo CA, but why do I trust them? I need to trust someone, okay? With respect to my browser, why does it trust them? When I downloaded, installed my browser, Mozilla, the company that made it, had done some checks on this company, Komodo CA, and they trust them, and therefore they've preloaded this certificate into my browser. We can see that in the browser, as part of the install, it comes with the certificate. So we must trust someone, and in this case we trust Komodo CA. So the question is, why can't we just have Komodo CA issue SIT certificate? Well, because this process of issuing a certificate takes some manual steps. SIT, as an organization, goes to an authority and says, will you issue me a certificate? And the authority should say, prove that you are SIT, and you own that domain, and maybe go through some steps to offer that proof, and that's manual, and that usually costs some money, or there are some, maybe you have to pay to get that issuing of the certificate. So that takes time. So there are many organizations that do that. So rather than Komodo CA to issue certificates for every low level organization, it delegates the responsibility to subunits. And the difference may be the level of trust, or the level of proof that's provided to get the certificate. If you want a certificate, just as a normal user, maybe you can show an email address or put something on a website to show that you own the domain, and an authority will issue a certificate for you. But if a company wants a certificate for many websites, like REG, ICT, WWW, they need to go through more steps to prove that they are SIT, and there may be different authorities to provide that proof. Right, so we said, my browser trust Komodo CA, if my browser did not trust Komodo CA, then my browser would not trust Komodo D, and therefore it would not trust SIT. Let's see where our browser shows us that. If we go into the, your browser will show the certificates that you already trust. If we go into the advanced properties, what we see in the set up in the preferences of my browser, I have a list of certificates that I already trust. Let's go through, see if you recognize any of the organizations. Let's go across and scroll down, find Komodo. Here in my browser settings, I see that Komodo RSA certification authority is built into my browser. Here's a self-signed certificate. We saw it. With respect to my browser, it says it's a built-in object. When I installed my browser, it came with it, this certificate. You'll see some of them are called software objects. They usually downloaded after I accessed some website. So my browser initially, when I installed it, trusted Komodo RSA certification authority. After some time, my browser also trusted, where was the one? Was it this one? Komodo RSA domain validation secure server. That was downloaded and the chain of trust existed.


Today I have brought my sister in to talk with me about how she has managed to almost completely cure her acne as you can see on both sides of her face. So we're going to get started. So the first thing she did was like, well the first sign of trouble that she had was with her gut. Five years ago or so she started getting an intolerance to peanut butter. I think it's because she would layer it like this thick of peanut butter on both sides of her bread and she would put it together and she would eat it and this would be like multiple times a day. The soundly she developed an intolerance to it and could no longer have peanut butter and she was fine for a while, you know, going about her thing and then what happened next? Um well, so I used to be able to like eat everything, I wasn't intolerant to anything and then it's like that said I grew intolerant to the peanut butter, like I'd get these horrible reactions with my gut like I'd like squeeze the loo and intense pains like she would have bent over in pain from it. So then it moved on to um bread was the next thing I couldn't have a lot of bread. She became gluten intolerant. So then afterwards like really around the same time I couldn't have dairy either like when I realized it was the gluten that was upsetting my gut so I kind of cut that out but I was still getting these reactions and I was like oh like what is it like I can't I was so and I thought oh well each time I have like cheese or you know dairy I wasn't much of a milk drinker but I loved cheese. Oh we didn't really like milk that much, we didn't have any like porridge and stuff better than that. Well I always liked soy milk better because my brother was dairy intolerant so I used to just drink his milk because it tasted better but then I'd have like chocolate and stuff and then that would react really badly so then I cut that out and I was a lot better for a while like having no dairy, no gluten although to be fair like I would cave a lot like at parties and I'd just eat it and be like screw the world, I'd just eat it. Cream stuff like oh it's really slapses. Cream and custard mmm. And I'd add all like I'd be eating those at parties and then I'd get the reaction afterwards because you live and you learn. And I went off sugar because I was getting, so after the reactions happened then I completely cut sugar out but I still had fruit so I had fruit toast but I didn't have refined sugar and that helped a bit like having no dairy, no gluten, no sugar. I'd be having like these, I'd make recipes because I'd be like I'd be having those cravings for sugar so I had like you know to make these sugar free, like refined sugar free recipes but I'd still be getting the reactions like my skin started breaking out a lot so I'd get these really sore, pustule filled like breakouts. Like cystic acne. Yeah, on my chin and like more on the side, it wasn't as bad as it was a few months ago like a few months ago was when I hit like the worst, I hit the wall like it was really really bad like I had acne all over my face and I'd get like these yeah I had this horrible reaction and I'd put it towards the sweet potato chips because I was having a lot of those so I'd have my little sweet potato chips but I'd have them like for the two months with Pry like every weekend like I have them all the time because I'd be going out with my friends but I don't think it was just that but I think it was just because they could have like a lot of cafe sweet potato chips have sugar in them and other stuff and other stuff that you know you don't really want to know about like additives. Yeah so that was I think it's preservatives, I think preservatives because a lot of packaged foods make my skin and my gut react so I feel like it was the process the chemicals that they'd add in there that was what was reacting to my very sensitive gut. I never had acne or pimples or whatever you call them during high school like I always had a really nice skin, very blessed. Before my gut reaction happened I had really good skin so it wasn't triggered by hormones or anything like that because I knew every time my gut had a reaction that was when I'd break out so it built up built up I had these gut reactions and then it led to like I said a few months ago so about March this year I kind of like they really used to be like breakout it was like really a hot mess guys it wasn't nice.  About March I started doing like different cleansers because I would be using more chemical ones I was like no I'm gonna get rid of as many toxins from my body as possible so I switched to a natural cleanser so I used coconut oil to kind of cleanse my skin so I put that on about twice a day just leave it on there to sit you guys if you want to try it out don't just leave it on there about keep it on there for about half an hour and then wipe it off because it can clog up your pores especially if you're an oily girl you have bigger pores so it's gonna clog them up and the lyric acid in it is what helps is like the antibacterial agent which helps to kill the bacteria in your face that's why I love people tend to use it then I do a toner which is outside of vinegar I wasn't very good with that I should have been more strict but I didn't I just cuz I was that's also antibacterial as well I didn't just a lot of it so what I do is I have it about every time I eat I have it before the five minutes before I drink so I have a tablespoon of outside vinegar in a glass of water so you can't dilute it because it's very strong so then I was I said I had the upside of any girls having so much of that a day and then I started having tea tree oil like the pure essential oil I didn't get like a mix or whatever I had a tea tree oil I used that to cut any bacteria I just literally just got a little cotton ball and just wiped it all over my face to kind of kill the bacteria and it helped heal up my skin a lot the only thing was it dried it out no and like if you guys are using it probably do spot treatment I just like whacked it all over my skin so I just want to clear it up just want to possibly go on slippery L which you get from your local food store that actually that made the biggest difference and you'll find out why later on that made the biggest difference for me but that was what actually started clearing up my skin a little bit so that was really helping so I was taking about a teaspoon of that a day but then I started talking to my naturopath she said for me to take MSM this sulfur sulfur powder both that was my gut which is what I was trying to fix up because I knew my skin was related to my gut so every time I got a flare up my skin would flare up so then one of our family friends had she had a daughter had an issue with gluten and they went to this more therapist and they told us about it and they're like you should probably check a one out my mom and I we went to recently researched a more therapist around but she's actually a bio renaissance therapist the more therapy is the type of machine that they use right so by renaissance means body and rent resonance because we're all energy right so everything created is made from a type of energy and the or you have is an energy around you but the what the machine does this by renaissance machine is it kind of it sends a so you use one finger you got to have it resting on these metal plates and she has a little metal thing that she kind of presses onto your finger and it sends this message is energy signal through your body and they will return it and the noise that it makes tells you if you've got it or if you don't like if you have she'll test for bacteria parasites like metals whatever it might be in your system she'll test for it she said I had a lot of um like parasites in my gut I had 14 out of the 20 types of candida in my gut and then she wanted to have a look at my eyes because with your eyes you guys can there's no um like veiny not in the iris so the colored part of your eye there's little lines like then they mine had these little black curve shadow edges around them which said that my uh gut was really low it wasn't that my digestive system was really low wasn't working properly at all and she also said my liver function was really badly too was really not good as well I wasn't good because it was having all the stress strain on it put like put on it because it was trying to just have the toxins in my body because of all the parasites and bacteria it had a lot of toxins in my body so she said that my liver function wasn't great and the way you tell that is at the top right hand part of your eye so your right side the top part of your eye is it like a color discoloration up there and that tells you how your liver is because your liver's on the right side and you can also tell how healthy your kidneys are through your eyes as well because your kidneys are on both sides so I went on she's given me a lot of herbs I'm taking MSM I'm taking a slippery elm this herbal concoction that she made so I found the more therapy and taking this slippery elm well because slippery elm by the way the reason why it helped so much was because it kills the parasites so slippery elm is a great parasite killer MSM to help boost my um sulfur levels like because I love a lot of because my digestive system is so low I'm not actually absorbing any nutrients so my B levels are low no matter what I'm doing it's like just not absorbing it through the gut so I'm having to take B12 and things because she kind of threw a spray so it soaked through my mouth instead of through the gut by the way I was also got this last month I've gone into a micronutrient diet not both of us macronutrients are like protein carbohydrates that's macros that's macros micronutrients are like your vitamins your minerals nutrients so you're like your B12 vitamin A vitamin D calcium iron and all that that's the micronutrients so this plan which is what Meg and I have been on basically um helps to increase your macronutrient level through what you're eating so basically on this plan we've been eating specific foods that are organic because they're like some of them are like worse so to have conventional so we've been having the ones that they said to have organic and then some other ones like which are okay to have conventional and it's only for a month or so we're doing the 28 day one we've had to cut out all process foods which is good I've actually been feeling a lot better because of it like more energy less like kind of brain fog I guess like where you kind of like really get and you're tired a lot and it caters to almost every uh diet to diet you need the thing the thing with the um the diet plan has helped me a lot because it's kind of cleansed those toxins out of my body but because my body isn't absorbing the nutrients as much it's not great in a sense like it's helping me because the nutrients that I'm getting it's absorbed better than what it was before but my nutrient level is still quite low so I'm sorry to kill my gut up to be able to absorb these good nutrients so that's basically Meg's story of how she's almost cured her acne so far as you can see again it's so much better nothing on her shoulders nothing on her chest it's like kind of sort of went blank back to the middle it's like sort of sucking back in again so it's a good sign that her gut is healing and we're I'll continue I'll do another video once her acne has completely healed and we'll tell you the process from here until then but otherwise I hope you guys enjoyed the video I hope you learned a lot um if you're interested in what she's done I'll link out all the information about in this description below otherwise have a fantastic day and I'll see you in my next video bye


Hello, everyone. My name is Paul Protter. I work for Manchester School of Art, Manchester Metropolitan University. This is a joint paper myself and Jacqueline. Unfortunately, Jacqueline is busy in Manchester today, so I'm going to deliver on my own, but I'm also delivering actually for all of the staff who have been involved in this project. It's about designing a new digital arts curriculum where technology inspires new stories and new experience and, in fact, new realities. I hope that the paper is going to be provocative. It's going to read a debate about how we can challenge our students, the digital and creative industries and ourselves as academics as part of a process of rethinking the educational experience. This will be done by charting the journey we've taken and are, in fact, still taking to develop a future proof, if that is indeed possible, curriculum for a new school of digital arts, which, throughout the paper, I'm going to be referring to as Soda, the acronym. Soda is due to open in 2021 on campus at Manchester Met. The school will bring together courses and disciplines from around faculty, including computing, business, user experience and media. The portfolio will include animation, filmmaking, games art, immersive arts, photography, sound and visual arts, and there are many more courses that will be coming on stream in addition to those. The intention is to build a school that has the capacity to enable students to work collaboratively to co-create across a range of disciplines in a bespoke environment that has the physical and educational resources for students to develop the skills and attributes to gain employment in the UK creative digital sectors, thereby filling, hopefully, the UK digital skills gap. This will require innovative approaches to nurturing talent that instills transdisciplinary methodologies at the heart of the learning experience for students, challenging our subject disciplines and encouraging not only a willingness but hopefully a desire in both staff and students to cross boundaries and acquire a broader range of skills that are suited to the flexible and adaptable ways of working in contemporary culture and responding to the fast pace of the change that the creative and digital sectors that we all know is facing. The foundational structure of Soda has been to achieve a series of structured design sprints that were modelled on a method developed by Jake Knapp, maybe you know Jake Knapp at Google Ventures. The aim of the sprints was to generate ideas, solve problems and test solutions through the designing of new models of learning and teaching suitable for a new generation of creatives. The sprints involved academics, it involved technical support, it involved professional services from across the university's faculties as well as partners from industry and key influences from around the world including HKU in Holland and Parsons and NYU in New York. These partners formed the crucial, really the crucial first steps for developing an inspired curriculum built on flexibility and an open approach to learning where not only the design of the curriculum was redressed but also the academic roles were questioned, this is a really key thing, questioning our roles and the roles of others within the institution. We needed to consider how academics and technical staff may work in an environment of the teacher, the coach, the advisor and the co-learner. This all proved incredibly challenging as you might imagine but also really exciting. So the first three weeks sprint placed a focus on sharing existing good practices as you would expect at the beginning of a process, we're sharing what we already do. Each day was structured to encourage collaborative active play and creative thinking in relationship to our expanding notion of student experience in HE. So the sprints were rooted in the sharing of knowledge and the expertise across the vast range of academic and technical staff, research professors, professors, students and industry partners via a series of activities. The curriculum in the end was constructed, it was animated, it was gamified, this became known as the lens of perception and it was performed and it's an articulated in a way that signals our school's core disciplines and those disciplines were given to us actually prior to the development of the school and they are creativity, you may imagine, collaboration, absolutely key and practical and through practical we mean technological application. A key driver for the design of the new curriculum was meaningful engagement with the digital and creative sectors. The landscape of these industries as you probably know is changing and digital companies are increasingly failing to recognise traditional disciplinary boundaries and are instead focusing on attracting young creatives who are flexible and adaptable and able to learn independently and contribute directly to or even maybe disrupt the companies that they work for. In terms of designing the curriculum that's not only responsive but is impactful to change our challenge is focused on how we as academics and tutors on the one hand recognise subject disciplinarity but at the same time avoid siloing our students into specialisms, it's a really difficult thing to do navigating that boundary between specialism and multidisciplinarity. The aim through the curriculum design sprints was to establish a refreshed ethos to learning and teaching environment we occupy with our students to celebrate the collaborative act by encouraging our students to discover their individual creativity within a team and value the skills of sharing knowledge, imagination, expertise and experience with others. We felt that being open to new ways of learning and communicating with our peers would inevitably lead to fostering a collective voice to alternative approaches to telling stories through digital technologies. As one of our graduating filmmaking students puts it, intersections between audience participants and me the filmmaker sharing the authorship and sharing creative stories. So the collective self is a living evolving archive capturing fleeting moments thoughts and feelings of women all over the world. The archive currently contains 800 thoughts from 67 women in 20 different countries and the process of making this project only took three months but my research journey has been a lot longer than that and it started off with a frustration with the linear film format and more specifically with the ethical shortcomings of being a documentary filmmaker. I began to question authorship and the power and the control that I had to kind of manipulate other people's stories. Why I wanted to create was a more open and inclusive practice. I was making films with people and not about them. Well the web app was used to kind of capture the thoughts and so anyone can participate. You only need a phone, the internet and be willing to share your thoughts to take part. So any woman could partake in any country and that was really important to me to kind of have it to be as accessible and open as possible. I knew I had to have some kind of ordering logic to this archive so when I made the web app I also created a second question. The first question was what are you thinking right now and the second was what are you feeling right now? So then I had eight different emotions that the participants themselves categorised where their thought belonged. So that was my kind of the order of the archive and I created a control panel on the iPad to kind of so the audience was allowed to kind of interact with the project and create their own meaning and take whatever they want out of it by inviting the audience in to engage with it in a different way and interact with the material that allows for more engagement. You're given an opportunity to kind of select for yourself and control the work yourself and it becomes this kind of intersection between audience, participants and me sharing the authorship and sharing and creating stories. Okay so the Victoria's approach there about making films with people rather than about them breaks down kind of boundaries of authorship opening up shared space for creative storytelling thus giving the participant a voice. This can be quite a challenge for young creative students but once experienced as you can see with Victoria hierarchical structures are challenged in interesting and dynamic ways. A diversity of voices can be heard and new approaches to storytelling emerge when the director examines and alters their role within the partnership and with others. This leads to our strategy to develop a curriculum that's vertical and by vertical we mean where knowledge skills and expertise are shared across educational levels across subject divides and across academic research technical support industry populations communities and our students that our students engage with. This inspires an approach to learning that's driven by the needs of the research community we aim to create and the open culture of cooperation that we define in our curriculum model. The curriculum we have the ambition to design and deliver is one where participants provide the key driver for the curriculum as disciplines become more permeable as the levels progress we increasingly encourage our students with different specialisms to work together on projects learning from each other and sharing their knowledge and expertise. Such a curriculum will enable students to work with research colleagues on projects as well as with industry partners and nonprofit making charities and societal projects. Some of the work as we've already begun in the media department I don't have time to tell you about those right now but here they are narratives of homelessness project that we're doing a visualizing radio where students have made 30 second animations about radio and talent lab which is something that we do annually where we get students to work with industry. Expectation is such that a model will benefit everybody and in particular our students who will receive direct experience through working with real projects with a range of people and a breadth of experience and therefore develop their skills as critical practitioners. One of the key things in working on this project was to work directly with industry very intimately actually with industry and to get them involved in what we're doing and one of the things that came out of that or a number of things that came out of that a number of kind of learning things that came from engaging with a relatively new creative digital sector. The first was that the younger the company is the smaller it is I should say and less hierarchical it tends to be you know hierarchy tends to be limited to to larger companies. Technology is intrinsic in the business it's not the key driver for them. They seek new talent they want creative thinkers they want makers with fresh ideas and approaches to get an edge on their competition. They're more accepting of failure interestingly and they are enthusiastic about collaborating with the school to further their own learning as individuals and as businesses. Another key strategy another key strategy curriculum strategy is to fully integrate our technical expertise now like in most institutions our technical services is again siloed it's in a different part of the university and as I'm sure you all come across this you know I'm talking about siloing students but all our services are siloed so we're trying to create a space where we can bring all of those all of that expertise together within one creative digital space. I'm running out of time but I just want to finish by saying the idea is to create a community of digital practice that makes best use of the staff and student expertise. It breaks down the barriers and the hierarchies of traditional defined educational roles and to consider the student-teacher relationship and the creative space for open dialogue that crosses a multitude of expertise in our universities in our schools and in our communities. I have to stop there because I've run out of time I think. So thank you very much and I'm really very interested in hearing from you. There's my email address please do contact me. We want you involved in what we're doing in building this new school. Thank you. Thank you Pa. Any questions in the audience? There's roving microphones so if you have a question no question sofa. There's an online question. Do industry partners contribute to the curriculum development process? Yes very very much so they were involved in the curriculum design sprints that we were doing and they were encouraged to be involved in other activities that we engaged them in. You probably realise that getting industry to give up time to come into the university or even give up time when we go out to them is quite difficult process but however we you know the industries that we contacted that we have partnerships with they're really keen in getting involved with what we're doing because they see it as a space that they can use they see it as a resource for them so it's an experimental space and a risk taking space as well. Questions in the audience? Okay no thank you Pa. Thank you. to machine learning and smart campus technology.


Hello. Like many British people, all of us really, I've spent my life with a kind of assumption that the NHS will always be there for us in the way it always has been. Free service and beautiful attention and kindly efficiency at the point of need. It's a wonderful service and all through my life, although I've been blessed with reasonable health, I've gone in for an inpatient, outpatient, an operation here, a treatment there and it's just such a wonderful, wonderful part of being British. And I know because I spend a fair amount of time in the United States and I've seen what a nightmare healthcare, if you can call it that, is in America. A real nightmare. And the idea of that infecting our NHS is like the idea of a new pandemic, frankly, that kind of infection would destroy and compromise the health service that we've grown to depend on to love and to be incredibly proud of. And our research shows that American corporations are embedding themselves in our NHS. And this is a really dangerous and a very, very worrying turn of events. So please, if you can, help us support what we so love in our health service, would you do that? Your NHS needs you.com. Go there and do what you can to join us in helping save the beloved NHS.