Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

oxdef
May 23, 2017
Programming
0
31

HTTPS by default - no more clear

Phdays 2017

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
oxdef
0
180
Keynote at ZeroNights X (2021)
oxdef
0
150
Security Culture: Here be Hackers
oxdef
0
500
OWASP Top 10 - 2017 What’s inside?
oxdef
0
540
И разработчик станет хакером!
oxdef
0
40
Implementing Content Security Policy at a Large Scale
oxdef
0
550
Security in developer’s life: knowledge is power
oxdef
0
350
Web Application Security: future standards and technologies
oxdef
0
350
Content Security Policy - the panacea for XSS or placebo?
oxdef
0
380

Other Decks in Programming

See All in Programming
PHPUnit 高速化テクニック / PHPUnit Speedup Techniques
pinkumohikan
1
860
読もう! Android build ドキュメント
andpad
1
200
Develop Faster With FrankenPHP
dunglas
1
1.7k
複数ドメインに散らばってしまった画像…！ 運用中のPHPアプリに後からCDNを導入する…！
suguruooki
0
410
Identifying and Analyzing Fake OSS with Malware - fukuoka.go#21
rhykw
0
520
PsySHから紐解くREPLの仕組み
muno92
PRO
1
500
データベースエンジニアの仕事を楽にする。PgAssistantの紹介
nnaka2992
8
3.9k
NestJSのコードからOpenAPIを自動生成する際の最適解を探す
astatsuya
0
160
Devinのメモリ活用の学びを自社サービスにどう組み込むか？
itarutomy
0
1.3k
OUPC2024 Day 1 解説
kowerkoint
0
390
CQRS+ES勉強会＃１
rechellatek
0
380
eBPF Updates (March 2025)
kentatada
0
120

Featured

See All Featured
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
mongodb
45
9.5k
[RailsConf 2023] Rails as a piece of cake
palkan
53
5.4k
Bootstrapping a Software Product
garrettdimon
PRO
307
110k
Sharpening the Axe: The Primacy of Toolmaking
bcantrill
40
2k
No one is an island. Learnings from fostering a developers community.
thoeni
21
3.2k
Art, The Web, and Tiny UX
lynnandtonic
298
20k
Principles of Awesome APIs and How to Build Them.
keavy
126
17k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.5k
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
194
16k
Agile that works and the tools we love
rasmusluckow
328
21k
Speed Design
sergeychernyshev
28
850
BBQ
matthewcrist
88
9.5k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts oxdef@yandex-team.ru