Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

oxdef
May 23, 2017
Programming
0
31

HTTPS by default - no more clear

Phdays 2017

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
oxdef
0
170
Keynote at ZeroNights X (2021)
oxdef
0
140
Security Culture: Here be Hackers
oxdef
0
490
OWASP Top 10 - 2017 What’s inside?
oxdef
0
530
И разработчик станет хакером!
oxdef
0
40
Implementing Content Security Policy at a Large Scale
oxdef
0
530
Security in developer’s life: knowledge is power
oxdef
0
340
Web Application Security: future standards and technologies
oxdef
0
350
Content Security Policy - the panacea for XSS or placebo?
oxdef
0
380

Other Decks in Programming

See All in Programming
Honoとフロントエンドの 型安全性について
yodaka
7
1.2k
DROBEの生成AI活用事例 with AWS
ippey
0
130
Honoのおもしろいミドルウェアをみてみよう
yusukebe
1
210
責務と認知負荷を整える! 抽象レベルを意識した関心の分離
yahiru
2
430
『GO』アプリ バックエンドサーバのコスト削減
mot_techtalk
0
140
Software Architecture
hschwentner
6
2.1k
ファインディの テックブログ爆誕までの軌跡
starfish719
2
1.1k
ファインディLT_ポケモン対戦の定量的分析
fufufukakaka
0
710
Bedrock Agentsレスポンス解析によるAgentのOps
licux
3
840
Conform を推す - Advocating for Conform
mizoguchicoji
3
690
一休.com のログイン体験を支える技術 〜Web Components x Vue.js 活用事例と最適化について〜
atsumim
0
470
Java Webフレームワークの現状 / java web framework at burikaigi
kishida
9
2.2k

Featured

See All Featured
KATA
mclloyd
29
14k
Adopting Sorbet at Scale
ufuk
74
9.2k
Unsuck your backbone
ammeep
669
57k
Designing for humans not robots
tammielis
250
25k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
226
22k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
666
120k
Being A Developer After 40
akosma
89
590k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
irinanazarova
6
550
Producing Creativity
orderedlist
PRO
344
39k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
30
2.2k
The Pragmatic Product Professional
lauravandoore
32
6.4k
Fireside Chat
paigeccino
34
3.2k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]