Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for oxdef oxdef
May 23, 2017
Programming
35
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
260
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
220
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
570
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
650
И разработчик станет хакером!
Avatar for oxdef oxdef
0
62
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
670
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
410
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
410
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
440

Other Decks in Programming

See All in Programming
Back to the roots of date
Avatar for jinroq jinroq
0
890
エラー処理の温故知新 / history of error handling technic
Avatar for nakaryo ryotanakaya
7
1.9k
Hive Metastoreを通して学ぶIceberg REST Catalog ― 仕様から実装まで
Avatar for okumin okumin
0
160
2026年のソフトウェア開発を考える（2026/05版） / Software Engineering Scrum Fest Niigata 2026 Edition
Avatar for Takuto Wada twada
PRO
23
13k
サプライチェーン攻撃対策「層を重ねて落ちない壁」を10日間で組み上げた話 #TechLeadConf2026
Avatar for Kashun Yoshida kashewnuts
1
290
ReactとSvelteのその先、Ripple-TS / Beyond React and Svelte: Ripple-TS
Avatar for TOMIKAWA Sotaro ssssota
0
290
開発体験を左右するライブラリの API 設計 - GraphQL スキーマ構築ライブラリから考える #tskaigi
Avatar for izumin5210 izumin5210
1
200
tsserverとは何だったのか_これからどうなるのか
Avatar for Ryota Nakamura nowaki28
0
190
Lightning-Fast Method Calls with Ruby 4.1 ZJIT / RubyKaigi 2026
Avatar for Takashi Kokubun k0kubun
3
3.2k
AgentCore Optimizationを始めよう！
Avatar for matsukada licux
3
260
Skillは並べた。動かなかった。契約で繋いだ。— 65個のSkillから、自走する開発サイクルへ
Avatar for じゅん junholee
0
640
Agent Skills を社内で育てる仕組み作り
Avatar for jackchuka jackchuka
1
2.1k

Featured

See All Featured
The Spectacular Lies of Maps
Avatar for Per Axbom axbom
PRO
1
750
HU Berlin: Industrial-Strength Natural Language Processing with spaCy and Prodigy
Avatar for Ines Montani inesmontani
PRO
0
380
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
46
2.8k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
Avatar for Joe Casabona jcasabona
34
2.7k
Color Theory Basics | Prateek | Gurzu
Avatar for Gurzu gurzu
0
310
The AI Revolution Will Not Be Monopolized: How open-source beats economies of scale, even for LLMs
Avatar for Ines Montani inesmontani
PRO
3
3.4k
Building AI with AI
Avatar for Ines Montani inesmontani
PRO
1
1k
HDC tutorial
Avatar for Michiel Stock michielstock
2
660
Speed Design
Avatar for Sergey Chernyshev sergeychernyshev
33
1.7k
Everyday Curiosity
Avatar for Cassini Nazir cassininazir
0
210
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
698
190k
Are puppies a ranking factor?
Avatar for Jono Alderson jonoalderson
1
3.4k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]