Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
0
32

HTTPS by default - no more clear

Phdays 2017
Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
200
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
170
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
520
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
580
И разработчик станет хакером!
Avatar for oxdef oxdef
0
43
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
600
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
360
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
370
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
400

Other Decks in Programming

See All in Programming
Composerが「依存解決」のためにどんな工夫をしているか #phpcon
Avatar for hideki kinjyo o0h
PRO
1
330
PipeCDのプラグイン化で目指すところ
Avatar for Warashi warashi
1
290
Azure AI Foundryではじめてのマルチエージェントワークフロー
Avatar for 瀬尾佳隆 seosoft
0
190
AI コーディングエージェントの時代へ：JetBrains が描く開発の未来
Avatar for Masaru Horioka masaruhr
1
200
A full stack side project webapp all in Kotlin (KotlinConf 2025)
Avatar for Dan Kim dankim
0
130
チームのテスト力を総合的に鍛えて品質、スピード、レジリエンスを共立させる/Testing approach that improves quality, speed, and resilience
Avatar for Hiroki Iseri goyoki
5
1k
Modern Angular with Signals and Signal Store: New Rules for Your Architecture @enterJS Advanced Angular Day 2025
Avatar for Manfred Steyer manfredsteyer
PRO
0
240
#kanrk08 / 公開版 PicoRubyとマイコンでの自作トレーニング計測装置を用いたワークアウトの理想と現実
Avatar for bash0C7 bash0c7
1
900
レベル1の開発生産性向上に取り組む − 日々の作業の効率化・自動化を通じた改善活動
Avatar for kesoji kesoji
0
270
GPUを計算資源として使おう！
Avatar for prime number primenumber
1
200
#QiitaBash MCPのセキュリティ
Avatar for Tommy(sigma) ryosukedtomita
1
1.5k
生成AI時代のコンポーネントライブラリの作り方
Avatar for touyou touyou
1
260

Featured

See All Featured
4 Signs Your Business is Dying
Avatar for Josh Pigford shpigford
184
22k
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
331
22k
Bootstrapping a Software Product
Avatar for Garrett Dimon garrettdimon
PRO
307
110k
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
223
9.7k
Agile that works and the tools we love
Avatar for Rasmus Luckow-Nielsen rasmusluckow
329
21k
A Tale of Four Properties
Avatar for Chris Coyier chriscoyier
160
23k
Embracing the Ebb and Flow
Avatar for Simon Collison colly
86
4.7k
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
246
12k
XXLCSS - How to scale CSS and keep your sanity
Avatar for Zaharenia Atzitzikaki sugarenia
248
1.3M
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
695
190k
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
336
57k
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
18
980

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]