Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

5b723186bd1e23af569bd623f193a2b9?s=47 oxdef
May 23, 2017
Programming
0
11

HTTPS by default - no more clear

Phdays 2017

5b723186bd1e23af569bd623f193a2b9?s=128

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
61
Keynote at ZeroNights X (2021)
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
22
Security Culture: Here be Hackers
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
230
OWASP Top 10 - 2017 What’s inside?
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
190
И разработчик станет хакером!
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
25
Implementing Content Security Policy at a Large Scale
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
230
Security in developer’s life: knowledge is power
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
130
Web Application Security: future standards and technologies
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
140
Content Security Policy - the panacea for XSS or placebo?
5b723186bd1e23af569bd623f193a2b9?s=48 oxdef
0
130

Other Decks in Programming

See All in Programming
JetPackComposeは宣言型プログラミングパラダイムって実はよくわかってないんですが、別に使ってもいいんですよね、
6affc38c52fa1cd2e395b3044cfb95fe?s=48 conigashima
0
170
模組化的Swift架構(二) DDD速成
A3d3b179955bdea9fc05b3251f1b1f10?s=48 haifengkao
0
370
Amazon Aurora の v1 が EOL になるので 10 クラスタアップグレードして出てきたノウハウ
A762939f94c8790c8ca8b717f1be9bee?s=48 dekokun
0
850
git on intellij
1a51f443c6d75a0576428792b0da05f2?s=48 hiroto_kitamura
0
170
Why Airflow? & What's new in Airflow 2.3?
4114559062197ddc69b311ea6e6207d0?s=48 kaxil
0
110
Mobile Product Engineering
37fbf83b7d45711e41e774e29fed710e?s=48 championswimmer
0
300
UI Testing of Jetpack Compose Apps, AppDevCon
2b0404a5db1a74f01bf3bf94d142e28c?s=48 alexzhukovich
0
130
Node-RED 3.0 新機能紹介
A56269ca269966f71293d08b32ad53b3?s=48 utaani
0
130
RFC 9111: HTTP Caching
1ff811939fd0923df8321ec6d8bf9d4b?s=48 jxck
0
150
Reactアプリケーションのテスト戦略
D661ba250e003e83b03c25852b27d3f8?s=48 0906koki
10
4.6k
エンジニアによる事業指標計測のススメ
Ee398a67f5017cc2ad5c02d67d10e516?s=48 doyaaaaaken
1
180
Jetpack Compose, 어디까지 알고 있을까?
4d4d46ec84935e69f6f63b011873335d?s=48 jisungbin
0
110

Featured

See All Featured
Helping Users Find Their Own Way: Creating Modern Search Experiences
3d4519fd34b76fb265fc0237f3792bd4?s=48 danielanewman
7
1.1k
How New CSS Is Changing Everything About Graphic Design on the Web
D83926c323d4f9289f947b4b4e76b939?s=48 jensimmons
213
11k
Imperfection Machines: The Place of Print at Facebook
7c8469ee8c9e594c65c59b919626c08d?s=48 scottboms
253
12k
Building Adaptive Systems
06f8b41980eb4c577fa40c41d5030c19?s=48 keathley
25
1.1k
Embracing the Ebb and Flow
C9b18d9dff88a9dd2393364c2b3b21bd?s=48 colly
73
3.4k
GraphQLとの向き合い方2022年版
893f54413c2bd9ba41d11d753aacaf2c?s=48 quramy
16
8.3k
The MySQL Ecosystem @ GitHub 2015
Be9caeb9d4ef9944d151af909063ed6e?s=48 samlambert
238
11k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
3d4519fd34b76fb265fc0237f3792bd4?s=48 danielanewman
212
20k
Creatively Recalculating Your Daily Design Routine
48c098b6579220a67a6ba949be6e4b5a?s=48 revolveconf
207
10k
Stop Working from a Prison Cell
C1daf20e5c49ff910745198ef9869ac2?s=48 hatefulcrawdad
261
17k
Git: the NoSQL Database
20bfe76b3d6105641f879fe45cfc9272?s=48 bkeepers
PRO
415
59k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
5b9fe87ec1faa67a4599782930f45ec9?s=48 sstephenson
151
13k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts oxdef@yandex-team.ru