US Adoption of HTTPS

C416a04a16b233e65afd993815c167dd?s=47 Ian Lee
October 17, 2017

US Adoption of HTTPS

Presented at LLNL CyberFest 2017

C416a04a16b233e65afd993815c167dd?s=128

Ian Lee

October 17, 2017
Tweet

Transcript

  1. LLNL-PRES-740064 This work was performed under the auspices of the

    U.S. Department of Energy by Lawrence Livermore National Laboratory under contract DE-AC52-07NA27344. Lawrence Livermore National Security, LLC U.S. Adoption of HTTPS LLNL Cyber Fest 2017 Ian Lee Lawrence Livermore National Laboratory October 17, 2017
  2. LLNL-PRES-740064 2

  3. LLNL-PRES-740064 3 M-15-13: Require Secure Connections

  4. LLNL-PRES-740064 4

  5. LLNL-PRES-740064 5 C.I.A. (no, not that one) § Confidentiality. —

    The visitor’s connection is encrypted, obscuring URLs, cookies, and other sensitive metadata. § Integrity. — The data sent between the visitor and the website has not been tampered with or modified. § Authenticity. — The visitor is talking to the “real” website, and not to an impersonator or through a “man-in- the-middle”.
  6. LLNL-PRES-740064 6

  7. LLNL-PRES-740064 7

  8. LLNL-PRES-740064 8

  9. LLNL-PRES-740064 9 9

  10. LLNL-PRES-740064 10

  11. LLNL-PRES-740064 11

  12. LLNL-PRES-740064 12

  13. LLNL-PRES-740064 13 13

  14. LLNL-PRES-740064 14

  15. LLNL-PRES-740064 15

  16. LLNL-PRES-740064 16

  17. LLNL-PRES-740064 17

  18. LLNL-PRES-740064 18

  19. LLNL-PRES-740064 19

  20. LLNL-PRES-740064 20

  21. LLNL-PRES-740064 21

  22. LLNL-PRES-740064 22

  23. Thank you! Ian Lee – ian@llnl.gov @IanLee1521 Thank you to

    Eric Mill at GSA for the use of his slides as inspiration for this talk.