Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
0
34

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
250
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
200
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
550
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
640
И разработчик станет хакером!
Avatar for oxdef oxdef
0
58
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
650
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
390
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
400
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
420

Other Decks in Programming

See All in Programming
AI時代の認知負荷との向き合い方
Avatar for OptFit Corp. optfit
0
140
ThorVG Viewer In VS Code
Avatar for Nor-s nors
0
760
Oxlint JS plugins
Avatar for kazupon kazupon
1
660
「ブロックテーマでは再現できない」は本当か？
Avatar for Takashi Kitajima inc2734
0
160
Kotlin Multiplatform Meetup - Compose Multiplatform 외부 의존성 아키텍처 설계부터 운영까지
Avatar for Suhyeon Kim wisemuji
0
190
CSC307 Lecture 04
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
660
CSC307 Lecture 07
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
550
HTTPプロトコル正しく理解していますか？ 〜かわいい猫と共に学ぼう。ฅ^•ω•^ฅ ﾆｬ〜
Avatar for ♛Heitor Hirose hekuchan
2
680
メルカリのリーダビリティチームが取り組む、AI時代のスケーラブルな品質文化
Avatar for osari.k cloverrose
2
510
The Past, Present, and Future of Enterprise Java
Avatar for ivargrimstad ivargrimstad
0
490
0→1 フロントエンド開発 Tips🚀 #レバテックMeetup
Avatar for 弁護士ドットコム bengo4com
0
540
AIによるイベントストーミング図からのコード生成 / AI-powered code generation from Event Storming diagrams
Avatar for nrs nrslib
2
1.8k

Featured

See All Featured
Jamie Indigo - Trashchat’s Guide to Black Boxes: Technical SEO Tactics for LLMs
Avatar for Tech SEO Connect techseoconnect
PRO
0
55
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
10
1.1k
Game over? The fight for quality and originality in the time of robots
Avatar for Wayne Barker wayneb77
1
110
Impact Scores and Hybrid Strategies: The future of link building
Avatar for Tamara Novitovic tamaranovitovic
0
200
Max Prin - Stacking Signals: How International SEO Comes Together (And Falls Apart)
Avatar for Tech SEO Connect techseoconnect
PRO
0
80
Paper Plane (Part 1)
Avatar for Katie Cordina Lindsey katiecoart
PRO
0
4k
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
46
8k
Leo the Paperboy
Avatar for Maya Tellez mayatellez
4
1.4k
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
247
13k
How To Speak Unicorn (iThemes Webinar)
Avatar for Michelle Schulp Hunt marktimemedia
1
380
Accessibility Awareness
Avatar for Sarah Abderemane sabderemane
0
49
How to optimise 3,500 product descriptions for ecommerce in one day using ChatGPT
Avatar for Katarina Dahlin katarinadahlin
PRO
0
3.4k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]