Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
43
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
290
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
240
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
590
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
680
И разработчик станет хакером!
Avatar for oxdef oxdef
0
69
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
700
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
430
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
430
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
460

Other Decks in Programming

See All in Programming
Agents on Rails - Rails at Scale 2026
Avatar for Irina Nazarova irinanazarova
0
560
re:Inventに行く前に知っておきたい現地参加のノウハウ
Avatar for nokomoro3 nokomoro3
0
430
AI時代のコードレビューは人に向けるな、仕組みに向けろ
Avatar for meijin texmeijin
5
3.7k
3回つくってわかった、
定期実行ジョブ基盤の本質情報
Avatar for Naoto Takai takai
0
480
[Dev Group Paris Octobre 26] Agentforce, SIforce, Claudeforce, Slackbot… on s'y retrouve ?
Avatar for Nathan Abondance nabondance
0
110
IBM Bob でAI駆動開発『QC-Playbook』
Avatar for 1kano ichirokano2
0
110
APNsからLive Activityを開始する話
Avatar for Ryotaro Onoue yumnumm
0
170
Domain-Driven Transformation
Avatar for Henning Schwentner hschwentner
2
2.3k
コードで差別化できない時代の ソフトウェアエンジニアリング / Software Engineering in an Era Where Code Doesn’t Differentiate
Avatar for Naoki Kishida kishida
2
180
カツオ、ご期待ください
Avatar for saku_totomi suneo3476
0
190
UPDATE をやめる — EF Core でマスタをバージョン管理する
Avatar for HideyukiKitao panda728
PRO
0
1.2k
パズルゲームの作り方 / how to make puzzle games
Avatar for kaityo256 kaityo256
PRO
2
290

Featured

See All Featured
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
360
Ecommerce SEO: The Keys for Success Now & Beyond - #SERPConf2024
Avatar for Aleyda Solis aleyda
1
2.2k
The Power of CSS Pseudo Elements
Avatar for Geoffrey Crofte geoffreycrofte
82
6.6k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
331
25k
Music & Morning Musume
Avatar for Bryan Veloso bryan
48
7.4k
KATA
Avatar for Megan Lloyd mclloyd
PRO
35
16k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
666
130k
Building a A Zero-Code AI SEO Workflow
Avatar for Ian Lurie portentint
PRO
0
780
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
38
3.1k
svc-hook: hooking system calls on ARM64 by binary rewriting
Avatar for Akira Moroo retrage
2
630
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
77
5.6k
Design of three-dimensional binary manipulators for pick-and-place task avoiding obstacles (IECON2024)
Avatar for konakalab konakalab
0
620

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]