US Adoption of HTTPS

Presented at LLNL CyberFest 2017

Transcript

1. LLNL-PRES-740064 This work was performed under the auspices of the U.S. Department of Energy by Lawrence Livermore National Laboratory under contract DE-AC52-07NA27344. Lawrence Livermore National Security, LLC U.S. Adoption of HTTPS LLNL Cyber Fest 2017 Ian Lee Lawrence Livermore National Laboratory October 17, 2017
2. LLNL-PRES-740064 2
3. LLNL-PRES-740064 3 M-15-13: Require Secure Connections
4. LLNL-PRES-740064 4
5. LLNL-PRES-740064 5 C.I.A. (no, not that one) § Confidentiality. — The visitor’s connection is encrypted, obscuring URLs, cookies, and other sensitive metadata. § Integrity. — The data sent between the visitor and the website has not been tampered with or modified. § Authenticity. — The visitor is talking to the “real” website, and not to an impersonator or through a “man-in- the-middle”.
6. LLNL-PRES-740064 6
7. LLNL-PRES-740064 7
8. LLNL-PRES-740064 8
9. LLNL-PRES-740064 9 9
10. LLNL-PRES-740064 10
11. LLNL-PRES-740064 11
12. LLNL-PRES-740064 12
13. LLNL-PRES-740064 13 13
14. LLNL-PRES-740064 14
15. LLNL-PRES-740064 15
16. LLNL-PRES-740064 16
17. LLNL-PRES-740064 17
18. LLNL-PRES-740064 18
19. LLNL-PRES-740064 19
20. LLNL-PRES-740064 20
21. LLNL-PRES-740064 21
22. LLNL-PRES-740064 22
23. Thank you! Ian Lee – ian@llnl.gov @IanLee1521 Thank you to Eric Mill at GSA for the use of his slides as inspiration for this talk.