[equalunique]

I must agree that on-the-job training is effective and possibly underrated in the field of cyber security. The one domain where it didn't stand out IMO was cryptography. Being taught how PKI and HTTPS work as a lesson in a course is valuable on it's own, however, when I think about all the coworkers that I've encountered who don't quite grasp how that stuff works, such a lesson has proved to be even more valuable. Would you say your on-the-job training covers PKI effectively?