Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Sponsored · SiteGround - Reliable hosting with speed, security, and support you can count on. →
Avatar for oxdef oxdef
May 23, 2017
Programming
0
34

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
250
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
210
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
550
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
640
И разработчик станет хакером!
Avatar for oxdef oxdef
0
61
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
650
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
390
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
410
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
430

Other Decks in Programming

See All in Programming
RAGでハマりがちな"Excelの罠"を、データの構造化で突破する
Avatar for harumi harumiweb
8
2.1k
Rで始めるML・LLM活用入門
Avatar for wakama1994 wakamatsu_takumu
0
120
JPUG勉強会 OSSデータベースの内部構造を理解しよう
Avatar for Atsushi Ogawa oga5
2
220
LangChain4jとは一味違うLangChain4j-CDI
Avatar for Kenji Kazumura kazumura
1
120
クライアントワークでSREをするということ。あるいは事業会社におけるSREと同じこと・違うこと
Avatar for nnaka2992 nnaka2992
1
260
PJのドキュメントを全部Git管理にしたら、一番喜んだのはAIだった
Avatar for oga_aiichiro nanaism
0
220
2026年は Rust 置き換えが流行る！ / 20260220-niigata-5min-tech
Avatar for girigiribauer girigiribauer
0
210
Python’s True Superpower
Avatar for Hynek Schlawack hynek
0
190
20260228_JAWS_Beginner_Kansai
Avatar for Takuya Yonezawa takuyay0ne
5
400
ぼくの開発環境2026
Avatar for yuzneri yuzneri
1
290
Head of Engineeringが現場で回した生産性向上施策 2025→2026
Avatar for gessy0129 gessy0129
0
200
nilとは何か 〜interfaceの構造とnil!=nilから理解する〜 / Understanding nil in Go Interface Representation and Why nil != nil
Avatar for kuro kuro_kurorrr
3
1.6k

Featured

See All Featured
Improving Core Web Vitals using Speculation Rules API
Avatar for Sergey Chernyshev sergeychernyshev
21
1.4k
Statistics for Hackers
Avatar for Jake VanderPlas jakevdp
799
230k
brightonSEO & MeasureFest 2025 - Christian Goodrich - Winning strategies for Black Friday CRO & PPC
Avatar for Christian Goodrich cargoodrich
3
110
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
12
1k
Imperfection Machines: The Place of Print at Facebook
Avatar for Scott Boms scottboms
269
14k
How to make the Groovebox
Avatar for あそなす asonas
2
2k
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
210k
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
81
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
Utilizing Notion as your number one productivity tool
Avatar for Mfonobong Umondia mfonobong
3
240
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
463
34k
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
17k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]