Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for oxdef oxdef
May 23, 2017
Programming
35
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
260
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
210
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
550
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
650
И разработчик станет хакером!
Avatar for oxdef oxdef
0
62
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
660
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
400
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
410
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
430

Other Decks in Programming

See All in Programming
20260315 AWSなんもわからん🥲
Avatar for Chiaki Okamoto chiilog
2
190
今年もTECHSCOREブログを書き続けます！
Avatar for 平奥真一（ひらおくしんいち） hiraoku101
0
220
AI駆動開発がもたらすパラダイムシフト
Avatar for 坂本 涼輔 ryosuke0911
0
120
ポーリング処理廃止によるイベント駆動アーキテクチャへの移行
Avatar for Seitaro Fujigaki seitarof
3
1.3k
Codex CLIのSubagentsによる並列API実装 / Parallel API Implementation with Codex CLI Subagents
Avatar for 冨澤宝斗 takatty
2
840
Reactive ❤️ Loom: A Forbidden Love Story
Avatar for Francesco Nigro franz1981
2
220
安いハードウェアでVulkan
Avatar for Fadis fadis
1
900
PHPのバージョンアップ時にも役立ったAST（2026年版）
Avatar for Atsushi Matsuo matsuo_atsushi
0
290
AI Assistants for Your Angular Solutions @Angular Graz, March 2026
Avatar for Manfred Steyer manfredsteyer
PRO
0
150
一度始めたらやめられない開発効率向上術 / Findy あなたのdotfilesを教えて！
Avatar for Takashi Kokubun k0kubun
4
2.8k
我々はなぜ「層」を分けるのか〜「関心の分離」と「抽象化」で手に入れる変更に強いシンプルな設計〜 #phperkaigi / PHPerKaigi 2026
Avatar for shogogg shogogg
2
800
レガシーPHP転生 〜父がドメインエキスパートだったのでDDD+Claude Codeでチート開発します〜
Avatar for panda_program panda_program
0
320

Featured

See All Featured
Building Adaptive Systems
Avatar for Chris Keathley keathley
44
3k
Fireside Chat
Avatar for paigeccino paigeccino
42
3.9k
We Analyzed 250 Million AI Search Results: Here's What I Found
Avatar for Josh Blyskal joshbly
1
1.1k
New Earth Scene 8
Avatar for Sydney Stone popppiees
2
2k
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
2.9M
First, design no harm
Avatar for Per Axbom axbom
PRO
2
1.2k
It's Worth the Effort
Avatar for 3n 3n
188
29k
The Straight Up "How To Draw Better" Workshop
Avatar for Dennis Kardys denniskardys
239
140k
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
40
2.3k
Sam Torres - BigQuery for SEOs
Avatar for Tech SEO Connect techseoconnect
PRO
0
230
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
10k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]