Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for oxdef oxdef
May 23, 2017
Programming
37
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
280
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
240
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
580
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
670
И разработчик станет хакером!
Avatar for oxdef oxdef
0
65
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
690
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
420
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
430
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
450

Other Decks in Programming

See All in Programming
Go を使い始めて 2 ヶ月の学び / My first two months with Go
Avatar for Daisuke Garaike contour_gara
0
370
わからない話を追いかけたら、プログラミング言語を作る側にいた
Avatar for ydah ydah
3
540
GDG Korea Android: 2026 I/O Extended ~ What's new in Android development tools
Avatar for pluulove (노현석) pluu
0
240
in-process GraphQL のすすめ #ginzajs
Avatar for izumin5210 izumin5210
4
1.5k
PyConJP2026_wat_Python × Signal Processing: How to Draw Pictures with Sound Using Spectrogram Art
Avatar for wat wat
0
280
運用ダッシュボードの設計を誰も教えてくれないのだけど みなさんどうしてるんですか？ - チームに監視するという文化を根付かせるための第一歩を踏みたい -
Avatar for Satoshi Kaneyasu satoshi256kbyte
1
140
プロポーザルを書いてもらう
Avatar for pvcresin pvcresin
0
570
Press start. Python's next generation.
Avatar for Carol Willing willingc
PRO
2
110
今さら聞けない .NET CLI
Avatar for tkym htkym
0
210
Claude CodeとAgentCore Gatewayを繋ぐ際の認証認可 / Authentication and authorization when connecting Claude Code with AgentCore Gateway
Avatar for Har1101 har1101
2
360
Loosening the Reins: Go Generics Get More Flexible
Avatar for kuro kuro_kurorrr
0
290
ソフトウェアエンジニアにとっての生成AI - 特性を知って使い倒す / generative ai for software enginner
Avatar for Naoki Kishida kishida
7
2.1k

Featured

See All Featured
Self-Hosted WebAssembly Runtime for Runtime-Neutral Checkpoint/Restore in Edge–Cloud Continuum
Avatar for Yuki Nakata chikuwait chikuwait
0
730
Measuring Dark Social's Impact On Conversion and Attribution
Avatar for Stephen Akadiri stephenakadiri
2
260
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
2
400
Navigating the moral maze — ethical principles for Al-driven product design
Avatar for Skipper Chong Warson skipperchong
2
500
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
220k
<Decoding/> the Language of Devs - We Love SEO 2024
Avatar for Nikki Halliwell nikkihalliwell
1
300
How to Talk to Developers About Accessibility
Avatar for Jason CranfordTeague jct
2
520
More Than Pixels: Becoming A User Experience Designer
Avatar for Michelle Schulp Hunt marktimemedia
3
500
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
57
14k
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
96
14k
We Analyzed 250 Million AI Search Results: Here's What I Found
Avatar for Josh Blyskal joshbly
1
1.8k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]