Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
0
34

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
250
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
210
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
550
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
640
И разработчик станет хакером!
Avatar for oxdef oxdef
0
62
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
660
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
400
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
410
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
430

Other Decks in Programming

See All in Programming
Rで始めるML・LLM活用入門
Avatar for wakama1994 wakamatsu_takumu
0
190
The Past, Present, and Future of Enterprise Java
Avatar for ivargrimstad ivargrimstad
0
750
AI 開発合宿を通して得た学び
Avatar for ニフティ株式会社 niftycorp
PRO
0
150
AI駆動開発の本音 〜Claude Code並列開発で見えたエンジニアの新しい役割〜
Avatar for hisuzuya hisuzuya
4
520
Takumiから考えるSecurity_Maturity_Model.pdf
Avatar for gessy0129 gessy0129
1
150
RAGでハマりがちな"Excelの罠"を、データの構造化で突破する
Avatar for harumi harumiweb
9
2.9k
Kubernetesでセルフホストが簡単なNewSQLを求めて / Seeking a NewSQL Database That's Simple to Self-Host on Kubernetes
Avatar for nnaka2992 nnaka2992
0
160
20260228_JAWS_Beginner_Kansai
Avatar for Takuya Yonezawa takuyay0ne
5
590
AIコードレビューの導入・運用と AI駆動開発における「AI4QA」の取り組みについて
Avatar for ハゲワシ hagevvashi
0
500
LangChain4jとは一味違うLangChain4j-CDI
Avatar for Kenji Kazumura kazumura
1
200
Codexに役割を持たせる 他のAIエージェントと組み合わせる実務Tips
Avatar for o8n o8n
4
1.4k
OTP を自動で入力する裏技
Avatar for Megabits_mzq megabitsenmzq
0
120

Featured

See All Featured
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1370
200k
Prompt Engineering for Job Search
Avatar for Mfonobong Umondia mfonobong
0
200
What does AI have to do with Human Rights?
Avatar for Per Axbom axbom
PRO
1
2k
So, you think you're a good person
Avatar for Per Axbom axbom
PRO
2
2k
Tell your own story through comics
Avatar for letsgokoyo letsgokoyo
1
850
Lightning Talk: Beautiful Slides for Beginners
Avatar for Ines Montani inesmontani
PRO
1
490
The #1 spot is gone: here's how to win anyway
Avatar for Tamara Novitovic tamaranovitovic
2
990
How STYLIGHT went responsive
Avatar for nonsquared nonsquared
100
6k
Bridging the Design Gap: How Collaborative Modelling removes blockers to flow between stakeholders and teams @FastFlow conf
Avatar for Kenny Baas-Schwegler baasie
0
480
Art, The Web, and Tiny UX
Avatar for Lynn Fisher lynnandtonic
304
21k
The Impact of AI in SEO - AI Overviews June 2024 Edition
Avatar for Aleyda Solis aleyda
5
770
Principles of Awesome APIs and How to Build Them.
Avatar for Keavy McMinn keavy
128
17k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]