Upgrade to Pro — share decks privately, control downloads, hide ads and more …

US Adoption of HTTPS

Ian Lee
October 17, 2017

US Adoption of HTTPS

Presented at LLNL CyberFest 2017

Ian Lee

October 17, 2017
Tweet

More Decks by Ian Lee

Other Decks in Technology

Transcript

  1. LLNL-PRES-740064 This work was performed under the auspices of the

    U.S. Department of Energy by Lawrence Livermore National Laboratory under contract DE-AC52-07NA27344. Lawrence Livermore National Security, LLC U.S. Adoption of HTTPS LLNL Cyber Fest 2017 Ian Lee Lawrence Livermore National Laboratory October 17, 2017
  2. LLNL-PRES-740064 2

  3. LLNL-PRES-740064 3 M-15-13: Require Secure Connections

  4. LLNL-PRES-740064 4

  5. LLNL-PRES-740064 5 C.I.A. (no, not that one) § Confidentiality. —

    The visitor’s connection is encrypted, obscuring URLs, cookies, and other sensitive metadata. § Integrity. — The data sent between the visitor and the website has not been tampered with or modified. § Authenticity. — The visitor is talking to the “real” website, and not to an impersonator or through a “man-in- the-middle”.
  6. LLNL-PRES-740064 6

  7. LLNL-PRES-740064 7

  8. LLNL-PRES-740064 8

  9. LLNL-PRES-740064 9 9

  10. LLNL-PRES-740064 10

  11. LLNL-PRES-740064 11

  12. LLNL-PRES-740064 12

  13. LLNL-PRES-740064 13 13

  14. LLNL-PRES-740064 14

  15. LLNL-PRES-740064 15

  16. LLNL-PRES-740064 16

  17. LLNL-PRES-740064 17

  18. LLNL-PRES-740064 18

  19. LLNL-PRES-740064 19

  20. LLNL-PRES-740064 20

  21. LLNL-PRES-740064 21

  22. LLNL-PRES-740064 22

  23. Thank you! Ian Lee – [email protected] @IanLee1521 Thank you to

    Eric Mill at GSA for the use of his slides as inspiration for this talk.