Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
41
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
280
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
240
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
590
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
670
И разработчик станет хакером!
Avatar for oxdef oxdef
0
65
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
690
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
430
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
430
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
450

Other Decks in Programming

See All in Programming
業務時間外もAIに働いてもらう話
Avatar for taki colorful12
3
10k
XHTMLが残したもの
Avatar for Yosuke Furukawa yosuke_furukawa
PRO
2
690
ハーネス設計入門 〜プロンプト、コンテキストの次〜
Avatar for kinopee kinopeee
56
38k
LLMは4年分のCompose移行を再現できるのか？実プロダクト279件のXMLで探る自動化の境界線
Avatar for makun makun
0
550
How I Stole PSI from Android Studio - DroidKaigi2026
Avatar for JunRong Tan worker8
0
110
AIを上手に使っていこうとしたら越境せざるを得なくなった話 〜実践1年で見えた境界を越えなければならない理由と進め方〜 / Crossing borders with AI
Avatar for TomoyaKitaura tomoyakitaura
4
1.1k
Can LLMs Replicate 4 Years of Compose Migration? Exploring the boundaries of automation with 279 XML files from a real product
Avatar for makun makun
0
130
Intent as Code
Avatar for Shoppingjaws shoppingjaws
6
920
Foundry Localでエージェント開発
Avatar for 瀬尾佳隆 seosoft
0
180
ゲームコントローラやキーボードのファームウェアをSwiftで書く
Avatar for Kishikawa Katsumi kishikawakatsumi
1
210
Omarchy Tokyo やると聞いて UMPC 買ってセットアップしてきた
Avatar for Fumiaki MATSUSHIMA mtsmfm
0
140
変化を抱擁するドキュメントの作り方 - ビジネスルール駆動開発がもたらす、コードとの新しい関係
Avatar for ioki ioki
2
150

Featured

See All Featured
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
15k
Darren the Foodie - Storyboard
Avatar for Kevinho.art khoart
PRO
3
3.9k
[SF Ruby Conf 2025] Rails X
Avatar for Vladimir Dementyev palkan
2
1.4k
Believing is Seeing
Avatar for Spiro Bolos oripsolob
1
210
Leading Effective Engineering Teams in the AI Era
Avatar for Addy Osmani addyosmani
9
2.6k
First, design no harm
Avatar for Per Axbom axbom
PRO
2
1.3k
We Analyzed 250 Million AI Search Results: Here's What I Found
Avatar for Josh Blyskal joshbly
1
1.9k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
191
12k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
141
35k
Discover your Explorer Soul
Avatar for Emna emna__ayadi
2
1.3k
Ruling the World: When Life Gets Gamed
Avatar for Sebastian Deterding codingconduct
0
330
Beyond borders and beyond the search box: How to win the global "messy middle" with AI-driven SEO
Avatar for David Carrasco davidcarrasco
3
240

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]